CVE-2026-102490

Published on September 30, 2026

All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.

Two Zammad Zero-Days Let an AI-Driven Intruder Reach Root on DIVD Systems

DIVD says two Zammad zero-days enabled session hijacking, remote code execution and root escalation in an AI-driven breach. Upgrade to Zammad 7 now.

This product uses the NVD API but is not endorsed or certified by the NVD.