Known Exploited Vulnerabilities · CISA KEV Catalog

CVE-2026-102490: Zammad GmbH Zammad Improper Privilege Management Vulnerability

Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489.

Read the original at CISA KEV Catalog ↗

Topics
Vulnerabilities & Patching
Mentions
CVE-2026-102490Zammad GmbH
Related
CVE-2026-102489: Zammad GmbH Zammad Session Fixation Vulnerability Known Exploited Vulnerabilities · Oct 02, 2026