zammad
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 124 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 13, 2017 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →CVE-2026-102489 Deep-Dive: Zammad Session Leak to RCE
Zammad GmbH Zammad Improper Privilege Management Vulnerability
Zammad GmbH Zammad Session Fixation Vulnerability
Zammad: Microsoft Graph error logs expose partially masked OAuth access tokens
Zammad: HTML sanitizer API path allowlist bypass via interior path traversal in img src/srcset
Zammad: Authenticated agents can read AI summary error messages from inaccessible tickets
Zammad: Invalid PGP Detached Signatures Reported as Good Signature on Inbound Mail
Zammad: Missing rate limiting allows password brute-forcing during two-factor login
Zammad: Sensitive Information Exposure in Integration Administration API
Zammad: S/MIME signature verification allows forged sender impersonation
Monitor zammad in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.