CVE-2026-102489
CRITICAL CISACVSS Score
N/A
Severity
CRITICAL
Source
CISA
Published
Oct 02, 2026
Description
Zammad GmbH โ Zammad: Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490.