Source: cisa.gov
Zammad GmbH's Zammad helpdesk application contains an improper privilege management vulnerability tracked as CVE-2026-102490. The flaw allows a local zammad user to escalate privileges to root level on the affected system. This vulnerability is reported as being actively exploited in the wild. It can be chained with a related vulnerability CVE-2026-102489 to further increase attack impact. CISA has listed this vulnerability and it falls under BOD 26-04 directives requiring prioritized security updates. Zammad has released patches available via their official releases page. Organizations running Zammad are urged to apply updates immediately and conduct forensic triage as outlined in BOD 26-04 implementation guidance. The vulnerability is also documented in NVD.
