Luke Paris

A session hijack issue allows for remote code execution as the zammad user. Approximately 12,000 instances have been identified globally.

Improper privilege management allows a local zammad user to escalate privileges to root.

A privilege escalation issue exists in the update service `FoxitPDFReaderUpdater.exe` due to an uncontrolled search path. This allows low-privilege users to place executable files in a location where they are directly executed by high-privilege processes, enabling the attacker to execute arbitrary code and elevate their privileges to NT AUTHORITYSYSTEM.