Skip to content
OpenAdvisories
Medium 1 exploited CVE WID-SEC-2026-3839 1 CVE

Zammad: Schwachstelle ermöglicht Privilegienerweiterung

Published Oct 8, 2026 · Updated Oct 8, 2026 · de-DE

Vendor: zammad Product: zammad Platform: Linux

Summary

Ein lokaler Angreifer kann eine Schwachstelle in Zammad ausnutzen, um seine Privilegien zu erweitern

Product

Zammad ist ein Helpdesk- und Ticketsystem.

Vulnerabilities 1

  • Critical 9.4
    CVE-2026-102490 Exploited EPSS 11%

    Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package

    Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as the unprivileged zammad service account to escalate to full root privileges on the host. Service processes began running a…

    zammad zammad
    KEV Oct 2, 2026

Revision history

  1. #1

    Initiale Fassung

References