CVE-2026-56724

UNKNOWN 0.0

Zammad: Incorrect implementation of permission checks in the knowledge base module

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary An issue with permission checks in the knowledge base management area has been identified. Under certain conditions, data validation for linked items was not fully enforced. This could have allowed users with limited read permissions to interact with items outside their assigned access scope. Data access has been strengthened in the current version through additional validation routines. This issue is fixed in version 7.0.2.

CWE	CWE-639 CWE-862
Vendor	zammad
Product	zammad
Published	Sep 25, 2026
Last Updated	Sep 25, 2026

Stay Ahead of the Next One

Get instant alerts for zammad zammad

Be the first to know when new unknown vulnerabilities affecting zammad zammad are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

zammad / zammad

< 7.0.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/zammad/zammad/security/advisories/GHSA-pv3q-74g5-w7fv github.com: https://github.com/zammad/zammad/commit/13ccc136e527adcab705ca8a3b2fb9ffc0cecddc github.com: https://github.com/zammad/zammad/releases/tag/7.0.2