Zammad GmbH Zammad Session Fixation

Latest briefings

Critical vulnerability warning above a compromised server core

CVE-2026-102489: Zammad GmbH Zammad Session Fixation Vulnerability

Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490.

02/10/2026 2 min read

Read briefing