CVE-2026-102489 — 脆弱性インテリジェンス

Zammad GmbH — Zammad

公表日: 2026-09-30T16:21:19.937Z

CVSS

8.7

CISA KEV

既知の悪用を確認

情報源の原文（翻訳ではありません）

Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490.

情報源

• Zammad GmbH Zammad Session Fixation Vulnerability
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• CVE-2026-102489