GHSA-hgff-g8g3-4xr8CriticalCVSS 9.8
All versions of Zammad including the latest alpha enable the local zammad user to escalate...
🔗 CVE IDs covered (1)
📋 Description
All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
🔗 References (8)
- https://nvd.nist.gov/vuln/detail/CVE-2026-102490
- https://csirt.divd.nl/CVE-2026-102490
- https://csirt.divd.nl/DIVD-2026-00015
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102490
- https://community.zammad.org/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297/2
- https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490
- https://github.com/zammad/zammad/security/advisories/GHSA-p97w-927q-8vxq
- https://github.com/advisories/GHSA-hgff-g8g3-4xr8