Where
-Infinity
0

Trending

Last week
Last month
Last year

Zammad ZammadZammad 7.0.1 - Improper authorization in ticket article attachment cloning

Risk 40
Severity
7.1
First published (updated )
CVE-2026-13229

Zammad ZammadZammad is miissing authorization in AI assistance controller for context data used in text tools

Risk 26
Severity
5.3
First published (updated )
CVE-2026-34837

Zammad ZammadZammad has improper access control in AI assistance controller for text tools

Risk 26
Severity
5.3
First published (updated )
CVE-2026-34782

Zammad ZammadZammad has a server-side template injection leading to RCE via AI Agent

Risk 63
Severity
8.7
First published (updated )
CVE-2026-34724

Zammad ZammadZammad has incorrect access control in getting_started_controller

Risk 47
Severity
8.7
First published (updated )
CVE-2026-34723
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Zammad ZammadZammad is missing authorization in ticket create endpoint

Risk 41
Severity
6.9
First published (updated )
CVE-2026-34722

Zammad ZammadZammad has Cross-site request forgery (CSRF) in OAuth callback endpoints

Risk 37
Severity
5.9
First published (updated )
CVE-2026-34721

Zammad ZammadZammad has an origin validation error in SSO mechanism

Risk 22
Severity
2.3
First published (updated )
CVE-2026-34720

Zammad ZammadZammad has a Server-side request forgery (SSRF) via webhooks

Risk 48
Severity
8.3
First published (updated )
CVE-2026-34719

Zammad ZammadZammad improperly neutralizes of script-related HTML tags in ticket articles

Risk 38
Severity
5.3
First published (updated )
CVE-2026-34718
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Zammad ZammadZammad has an information disclosure in ticket detail view of customers in shared organizations

Risk 33
Severity
2.1
First published (updated )
CVE-2026-34248

Zammad ZammadZammad 5.2.1 is vulnerable to Incorrect Access Control. Zammad's asset handling mechanism has logic …

Risk 38
Severity
6.5
First published (updated )
CVE-2022-40816

Zammad ZammadZammad 5.2.1 has a fine-grained permission model that allows to configure read-only access to ticket…

Risk 22
Severity
4.3
First published (updated )
CVE-2022-40817

Zammad ZammadZammad 5.2.0 is vulnerable to privilege escalation. Zammad has a prevention against brute-force atta…

Risk 86
Severity
9.8
First published (updated )
CVE-2022-35490

Zammad ZammadIn Zammad 5.2.0, customers who have secondary organizations assigned were able to see all organizati…

Risk 38
Severity
6.5
First published (updated )
CVE-2022-35489
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Zammad ZammadIn Zammad 5.2.0, an attacker could manipulate the rate limiting in the 'forgot password' feature of …

Risk 43
Severity
7.5
First published (updated )
CVE-2022-35488

Zammad ZammadZammad 5.2.0 suffers from Incorrect Access Control. Zammad did not correctly perform authorization o…

Risk 43
Severity
7.5
First published (updated )
CVE-2022-35487

Zammad ZammadAn issue was discovered in Zammad before 5.0.1. In some cases, there is improper enforcement of the …

Risk 27
Severity
5.3
First published (updated )
CVE-2021-42137

Zammad ZammadAn issue was discovered in Zammad before 4.1.1. An attacker with valid agent credentials may send a …

Risk 38
Severity
6.5
First published (updated )
CVE-2021-42084

Zammad ZammadXSS

Risk 34
Severity
5.4
First published (updated )
CVE-2021-42085
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Zammad ZammadAn issue was discovered in Zammad before 4.1.1. An Agent account can modify account data, and gain a…

Risk 79
Severity
8.8
First published (updated )
CVE-2021-42086

Zammad ZammadAn issue was discovered in Zammad before 4.1.1. An admin can discover the application secret via the…

Risk 30
Severity
4.9
First published (updated )
CVE-2021-42087

Zammad ZammadXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2021-42088

Zammad ZammadInfoleak

Risk 43
Severity
7.5
First published (updated )
CVE-2021-42089

Zammad ZammadAn issue was discovered in Zammad before 4.1.1. The Form functionality allows remote code execution …

Risk 86
Severity
9.8
First published (updated )
CVE-2021-42090
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Zammad ZammadSSRF

Risk 66
Severity
9.1
First published (updated )
CVE-2021-42091

Zammad ZammadXSS

Risk 34
Severity
5.4
First published (updated )
CVE-2021-42092

Zammad ZammadAn issue was discovered in Zammad before 4.1.1. An admin can execute code on the server via a crafte…

Risk 66
Severity
7.2
First published (updated )
CVE-2021-42093

Zammad ZammadCommand Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2021-42094

Zammad ZammadXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2018-1000154
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203