Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-34837 |
|
Vulnerability in zammad (CVE-2026-34837)
vulnerability in zammad (CVE-2026-34837). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/ai_assistance/text_tools/`. Mitigation: upgrade to `7.0.1` or later.
|
| CVE-2026-34719 |
|
SSRF (Server-Side Request Forgery) in zammad (CVE-2026-34719)
SSRF in zammad (CVE-2026-34719). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.1` or later.
|
| CVE-2026-34720 |
|
Vulnerability in zammad (CVE-2026-34720)
vulnerability in zammad (CVE-2026-34720). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.1` or later.
|
| CVE-2026-34721 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-34721)
vulnerability in csrf (CVE-2026-34721). Confidential information can be exposed externally. Mitigation: upgrade to `7.0.1` or later.
|
| CVE-2026-34722 |
|
Vulnerability in zammad (CVE-2026-34722)
vulnerability in zammad (CVE-2026-34722). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.1` or later.
|
| CVE-2026-34723 |
|
Vulnerability in zammad (CVE-2026-34723)
vulnerability in zammad (CVE-2026-34723). Confidential information can be exposed externally. Mitigation: upgrade to `7.0.1` or later.
|
| CVE-2026-34724 |
|
Code Injection in zammad (CVE-2026-34724)
code injection in zammad (CVE-2026-34724). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `7.0.1` or later.
|
| CVE-2026-34782 |
|
Vulnerability in zammad (CVE-2026-34782)
vulnerability in zammad (CVE-2026-34782). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/ai_assistance/text_tools/`. Mitigation: upgrade to `7.0.1` or later.
|
| CVE-2026-34248 |
|
Vulnerability in zammad (CVE-2026-34248)
vulnerability in zammad (CVE-2026-34248). Confidential information can be exposed externally. Mitigation: upgrade to `7.0.1` or later.
|
| CVE-2026-34718 |
|
Vulnerability in zammad (CVE-2026-34718)
vulnerability in zammad (CVE-2026-34718). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.1` or later.
|
| CVE-2017-5619 |
|
Authentication Bypass in zammad (CVE-2017-5619)
authentication bypass in zammad (CVE-2017-5619). Successful exploitation can lead to full system takeover.
|
| CVE-2017-5620 |
|
Cross-Site Scripting (XSS) in zammad (CVE-2017-5620)
cross-site scripting in zammad (CVE-2017-5620). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-5621 |
|
Cross-Site Scripting (XSS) in zammad (CVE-2017-5621)
cross-site scripting in zammad (CVE-2017-5621). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-6080 |
|
Cross-Site Request Forgery (CSRF) in zammad (CVE-2017-6080)
vulnerability in zammad (CVE-2017-6080). Successful exploitation can lead to full system takeover.
|
| CVE-2017-6081 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-6081)
vulnerability in csrf (CVE-2017-6081). Successful exploitation can lead to full system takeover.
|