Zammad zero-days for RCE and root (CVE-2026-102489/102490) | Hacker News - But Better

Zammad zero-days for RCE and root (CVE-2026-102489/102490)csirt.divd.nl

Multiple vulnerabilities found in Zammad including a Undisclosed RCE in Zammad version higher then 6.3 and a Undisclosed LPE in Zammad v1.5.0 to v7.1.0-alpha.

1 points•joshcsimmons•about 4 hours ago•0 comments•

#zammad #rce #zero #cve #root #zammad zero #undisclosed #vulnerabilities

0 comments

No comments yet.

Related stories

CISA active Linux kernel CVEs (CVE-2025-39964, CVE-2026-53266, CVE-2025-39682)github.com
Hacker News · 1 points · 8 days ago
TCP SACK PANIC - Kernel vulnerabilities - CVE-2019-11477, CVE-2019-11478 & CVE-2019-11479access.redhat.com
Lobsters · 1 points · over 7 years ago
A free, keyless MCP Server for CVE data and per-CVE internet Exposure
Hacker News · 1 points · 5 days ago
So Zero It's ... Negative? (Zero-Copy #3)manishearth.github.io
Lobsters · 14 points · about 4 years ago
Zero-downtime Linux kernel zero-day mitigation via eBPF and SECCOMPgithub.com
Hacker News · 7 points · 10 days ago
Continuous integration services for open-source projects not requiring config in root of repository?
Lobsters · 9 points · almost 9 years ago