CVE-2026-102490

UNKNOWN 0.0

Undisclosed LPE in Zammad v1.5.0 to v7.1.0-alpha

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.

Vendor	zammad gmbh
Product	zammad
Published	Sep 30, 2026

Stay Ahead of the Next One

Get instant alerts for zammad gmbh zammad

Be the first to know when new unknown vulnerabilities affecting zammad gmbh zammad are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Zammad GmbH / Zammad

1.5.0 < 7.1.0-alpha

References

NVD ↗ CVE.org ↗ EPSS Data ↗

csirt.divd.nl: https://csirt.divd.nl/DIVD-2026-00015 csirt.divd.nl: https://csirt.divd.nl/CVE-2026-102490

Credits

Earth Grob (Merlon Security) Luke paris (Merlon Security) Tijmen van der Spijk (Merlon Security) Zohar Cochavi (Merlon Security) Alje Woltjer (Merlon Security) Mischa Rick van Geelen (DIVD) Ralph Horn (DIVD) Max van der Horst (DIVD) Victor Pasman (DIVD) Frank Breedijk (DIVD)