Threat landscape
medium
exploited
×
Zammad: Schwachstelle ermöglicht Privilegienerweiterung
WID-SEC-2026-3839 · first 09.10.2026 · updated 09.10.2026 · CVSS 7,8
What it is about
Zammad ist ein Helpdesk- und Ticketsystem. Ein lokaler Angreifer kann eine Schwachstelle in Zammad ausnutzen, um seine Privilegien zu erweitern
Under what conditions?
Only with access to the device or an account on it. Often the second step after a phishing email.
What can happen in the worst case
An attacker could use the vulnerability to
- seine Privilegien zu erweitern
Am I affected?
Affected according to the BSI:
- Zammad Zammad <7.2.2
The installed version is usually shown under “Help → About” or in the device’s admin interface.
What helps?
Update to at least:
- Zammad Zammad 7.2.2
Is the vulnerability already being exploited?
- CVE-2026-102490: exploited in the wild according to CISA, in the catalogue since 02.10.2026.
Information and sources
- Original BSI advisory (WID)
- Zammad Release 7.2.2 vom 2026-10-08 zammad.com
- GitHub Security Advisory GHSA-p97w-927q-8vxq vom 2026-10-08 github.com
CVE: CVE-2026-102490
Source: BSI warning and information service (CERT-Bund); CISA. The assessment of the conditions is my reading of the BSI text; the external pages are in their original language.