zammad
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 127 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 13, 2017 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Zammad: Stored XSS in ticket article rendering in the new Vue-based interface
Zammad: Stored XSS in ticket article rendering in the new Vue-based interface
CVE-2026-102489 Deep-Dive: Zammad Session Leak to RCE
Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package
Zammad GmbH Zammad Session Fixation Vulnerability
Zammad: Microsoft Graph error logs expose partially masked OAuth access tokens
Zammad: HTML sanitizer API path allowlist bypass via interior path traversal in img src/srcset
Zammad: Authenticated agents can read AI summary error messages from inaccessible tickets
Zammad: Invalid PGP Detached Signatures Reported as Good Signature on Inbound Mail
Zammad: Missing rate limiting allows password brute-forcing during two-factor login
Monitor zammad in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.