CVE-2026-102490 — Vulnerability intelligence

Zammad GmbH — Zammad

Published: 2026-09-30T16:21:20.601Z

CVSS

8.5

CISA KEV

Known exploitation

Original source text (not a translation)

Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489.

Sources

• Zammad GmbH Zammad Improper Privilege Management Vulnerability
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• CVE-2026-102490