CVE-2026-102489 — Vulnerability intelligence

Zammad GmbH — Zammad

Original source text (not a translation)

Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490.

Sources

• Zammad GmbH Zammad Session Fixation Vulnerability
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• CVE-2026-102489