PT-2026-103454 · Zammad Gmbh+1 · Zammad

·

CVE-2026-102490

·

Published

2026-09-30

·

Updated

2026-10-02

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.

Fix

LPE

Improper Privilege Management

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-102490

Affected Products

Zammad