DeutschShown in its original language — a full translation is planned for a future version.
Zammad: Mehrere Schwachstellen
view advisory published 2026-04-07
Ein Angreifer kann mehrere Schwachstellen in Zammad ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, und um einen Cross-Site Scripting Angriff durchzuführen.
01
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-34837US | medium4.3OT elevated | — | ||
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, he REST endpoint POST /api/v1/ai_assistance/text_tools/:id contains an authorization failure. Co… | ||||
| CVE-2026-34782US | medium4.3OT elevated | — | ||
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the REST endpoint POST /api/v1/ai_assistance/text_tools/:id was not checking if a user… | ||||
| CVE-2026-34724US | high7.2 | Exploit | ||
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, a server-side template injection vulnerability which leads to RCE via AI Agent exists. Impact i… | ||||
| CVE-2026-34723US | high7.5 | — | ||
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, unauthenticated remote attackers were able to access the getting started endpoint to g… | ||||
| CVE-2026-34722US | medium4.3OT elevated | — | ||
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the used endpoint for ticket creation was missing authorization if the related paramet… | ||||
| CVE-2026-34721US | medium6.5 | — | ||
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the OAuth callback endpoints for Microsoft, Google, and Facebook external credentials… | ||||
| CVE-2026-34720US | medium4.3 | — | ||
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the SSO mechanism in Zammad was not verifying the header originates from a trusted SSO… | ||||
| CVE-2026-34719US | medium4.3 | — | ||
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the webhook model was missing a proper validation for loop back addresses, or link-loc… | ||||
| CVE-2026-34718US | medium6.1 | — | ||
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the HTML sanitizer for ticket articles was missing proper sanitization of data: ... UR… | ||||
| CVE-2026-34248US | medium5.7 | — | ||
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, customers in shared organizations (means they can see each other's tickets) could see fields whi… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-28m3-wwgv-ppw8 vom 2026-04-07external
- GitHub Security Advisory GHSA-2vgc-vfh2-rw75 vom 2026-04-07external
- GitHub Security Advisory GHSA-89vv-6639-wcv8 vom 2026-04-07external
- GitHub Security Advisory GHSA-96r7-29c8-2j7q vom 2026-04-07external
- GitHub Security Advisory GHSA-c2cf-9fc7-jhf3 vom 2026-04-07external
- GitHub Security Advisory GHSA-fg9w-jg8f-4j94 vom 2026-04-07external
- GitHub Security Advisory GHSA-hcm9-ch62-5727 vom 2026-04-07external
- GitHub Security Advisory GHSA-hcv6-w4h9-p2p7 vom 2026-04-07external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan