CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-09-30
Zammad DEB/RPM Package Local Privilege Escalation Advisory (CVE-2026-102490)
[Affected Scope] Zammad installations using DEB or RPM packages built via packager.io (Source and Docker excluded).
[Impact] A local attacker with 'zammad' service account access can escalate to full 'root' privileges on the host.
[Mitigation] Immediately update Zammad to the latest patched version via package manager.