Zammad Zammad

Name: Zammad Zammad
Brand: Zammad

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

EPSS ≥ 10%

unpatched

by severity

1critical5high10medium0low

updated 2026-10-27

vulnerabilities (27)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-102489US	critical9.8OT critical	1.96% (80th)	KEV	7.1.0-alpha	2026-09-30	3 versions
CVE-2026-102490US	high7.8OT critical	0.86% (58th)	KEV	7.2.2	2026-09-30	< 7.2.2
CVE-2026-34724US	high7.2	0.31% (24th)	Exploit	7.0.1	2026-04-08	3 versions
CVE-2026-63006US	—	0.48% (41st)	—	7.1.2	2026-09-25	< 7.1.2
CVE-2026-34723US	high7.5	0.44% (38th)	—	7.0.1	2026-04-08	4 versions
CVE-2026-13229US	—OT elevated	0.43% (37th)	—	7.1.2	2026-08-04	4 versions
CVE-2026-63205US	—OT elevated	0.32% (25th)	—	7.1.2	2026-09-25	< 7.1.2
CVE-2026-63208US	—	0.31% (23rd)	—	7.1.2	2026-09-25	< 7.1.2
CVE-2025-32359US	high8.8	0.30% (22nd)	—	6.5.0	2025-04-05	3 versions
CVE-2024-55578US	—	0.30% (22nd)	—	6.4.1	2024-12-09	< 6.4.1
CVE-2026-63204US	—OT elevated	0.29% (21st)	—	7.1.2	2026-09-25	< 7.1.2
CVE-2026-63206US	—	0.28% (20th)	—	7.1.2	2026-09-25	< 7.1.2
CVE-2025-32358US	medium4.1	0.27% (19th)	—	6.5.0	2025-04-05	3 versions
CVE-2025-32357US	medium4.3OT elevated	0.26% (18th)	—	6.5.0	2025-04-05	3 versions
CVE-2025-32360US	high8.1	0.25% (17th)	—	6.5.0	2025-04-05	3 versions
CVE-2026-34719US	medium4.3	0.24% (15th)	—	7.0.1	2026-04-08	4 versions
CVE-2026-63216US	—	0.24% (15th)	—	7.1.2	2026-09-25	< 7.1.2
CVE-2026-61855US	—	0.21% (11th)	—	7.1.2	2026-09-25	< 7.1.2
CVE-2026-65828US	—OT elevated	0.20% (10th)	—	7.1.2	2026-09-25	< 7.1.2
CVE-2026-34248US	medium5.7	0.19% (9th)	—	7.0.1	2026-04-08	3 versions
CVE-2026-34837US	medium4.3OT elevated	0.18% (7th)	—	7.0.1	2026-04-08	3 versions
CVE-2026-63207US	—OT elevated	0.17% (7th)	—	7.1.2	2026-09-25	< 7.1.2
CVE-2026-34782US	medium4.3OT elevated	0.17% (6th)	—	6.5.4	2026-04-08	3 versions
CVE-2026-34722US	medium4.3OT elevated	0.17% (6th)	—	7.0.1	2026-04-08	4 versions
CVE-2026-34718US	medium6.1	0.15% (4th)	—	7.0.1	2026-04-08	4 versions
CVE-2026-34721US	medium6.5	0.10% (1st)	—	6.5.4	2026-04-08	4 versions
CVE-2026-34720US	medium4.3	0.10% (1st)	—	7.0.1	2026-04-08	4 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-862Missing Authorization7 CVEs
CWE-284Improper Access Control2 CVEs
CWE-532Insertion of Sensitive Information into Log File2 CVEs
CWE-639Authorization Bypass Through User-Controlled Key2 CVEs
CWE-80Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)2 CVEs
CWE-918Server-Side Request Forgery (SSRF)2 CVEs
CWE-116Improper Encoding or Escaping of Output1 CVEs
CWE-1336Improper Neutralization of Special Elements Used in a Template Engine1 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)27 CVEs
EUEU Vulnerability Database (ENISA)15 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan