Zammad GmbH Zammad Improper Privilege Management Vulnerability

Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489.

Read at the source

Summary written for cymesh.dev. The full article lives at CISA.

Referenced CVEs

CVE-2026-102490

Topics

cve cisa

~/cymesh.net

This is what cymesh.net is for

Certificate and hostname problems are the ones you find out about from your users. cymesh.net finds them first.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Open the console See cymesh.net

~/related/zammad-gmbh-zammad-improper-privilege-management-vulnerability-spefs

2026-10-02 17:02 UTC[high]

Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes

The Hacker NewsCVE-2026-63688cloud cve

2026-10-02 12:00 UTC[med]

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA AdvisoriesCVE-2026-102489CVE-2026-102490cve cisa

2026-10-02 08:50 UTC[crit]

Critical FortiMail zero-day exploited in the wild (CVE-2026-104286)

Help Net SecurityCVE-2026-104286zero-day cve

2026-10-02 08:07 UTC[crit]

Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

SecurityWeekCVE-2026-104286zero-day cve

2026-10-02 05:49 UTC[crit]

Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

The Hacker NewsCVE-2026-104286zero-day cve cisa

2026-10-02 00:00 UTC[crit]

Zammad GmbH Zammad Session Fixation Vulnerability

CISACVE-2026-102489cve cisa