DeutschShown in its original language — a full translation is planned for a future version.
Zammad: Mehrere Schwachstellen
view advisory published 2026-08-03
Ein Angreifer kann mehrere Schwachstellen in Zammad ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen oder sich unbefugten Zugriff auf bestehende Benutzerkonten zu verschaffen, einschließlich Agenten- und Administratorkonten.
01
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-63216US | — | — | ||
Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, unsanitized option labels are rendered in the configuration dialogs of AI Agents within Zammad's… | ||||
| CVE-2026-63208US | — | — | ||
Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when a Microsoft Graph request fails, Zammad logs the error including the authentication token u… | ||||
| CVE-2026-63207US | —OT elevated | — | ||
Zammad is a web based open source helpdesk/customer support system. In 7.0.3 and 7.1.1, an authenticated administrator can obtain stored integration credentials in cleartext throug… | ||||
| CVE-2026-63206US | — | — | ||
Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, zammad's HTML sanitizer, which blocks remote images in ticket articles and email views, can be b… | ||||
| CVE-2026-63205US | —OT elevated | — | ||
Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when creating or updating an email signature, Zammad processes inline images referenced in the s… | ||||
| CVE-2026-63204US | —OT elevated | — | ||
Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, an authenticated user with agent permissions can supply an arbitrary AI analytics run identifier… | ||||
| CVE-2026-63006US | — | — | ||
Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, attacker-controlled HTML in inbound emails or tickets could bypass the image URL sanitizer using… | ||||
| CVE-2026-61855US | — | — | ||
Zammad is a web based open source helpdesk/customer support system. In 7.0.3 and 7.1.1, under certain conditions, Zammad's verification of inbound PGP-signed email can mark a messa… | ||||
| CVE-2026-65828US | —OT elevated | — | ||
Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, the legacy destroy_form action on AttachmentsController deletes UploadCache Store records based… | ||||
| CVE-2026-13229US | —OT elevated | — | ||
Zammad 7.1.0 contains an authenticated improper authorization vulnerability in the ticket article attachment cloning endpoint. | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-32gv-72x5-3983 vom 2026-08-03external
- GitHub Security Advisory GHSA-33p2-cm7w-62g3 vom 2026-08-03external
- GitHub Security Advisory GHSA-48h2-wv8r-fgp9 vom 2026-08-03external
- GitHub Security Advisory GHSA-4x3x-65c5-8hx4 vom 2026-08-03external
- GitHub Security Advisory GHSA-6vgm-xxp4-p6jv vom 2026-08-03external
- GitHub Security Advisory GHSA-6vh5-pfp2-5rmh vom 2026-08-03external
- GitHub Security Advisory GHSA-75j9-hpg4-j9f8 vom 2026-08-03external
- GitHub Security Advisory GHSA-86cc-3ggh-mf2m vom 2026-08-03external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan