Skip to content
COOEY

FAIL › dossier

Zammad GmbH

VENDOR

Failure events
2
Zero-days
0
RCEs
1
On KEV
2
Critical
0
Worst shame
85
Dossier not yet built — the RAG curator builds one for players with ≥2 failure events. The failure history and sentiment below are live.
FAILURE HISTORY · 2
DATEEVENTSEVSUMMARY
2026-10-02 CVE-2026-102490 high Zammad's improper privilege management flaw allows local users to escalate to root, and it is actively exploited in the wild.
2026-10-02 CVE-2026-102489 high Zammad's session fixation flaw allows remote code execution as the zammad user and is actively exploited in the wild.