CVE-2026-34248

Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.0.1

Description Zammad is a web based open source helpdesk/customer support system. In shared organizations, customers could view fields not intended for customer access, including fields restricted to internal use (e.g., priority, custom ticket attributes). This occurred when a customer opened a ticket on behalf of another user within the same shared organization. While customers could view these fields, they were unable to modify them.

Recommendations Update to version 7.0.1 or later.