vulnerabilityCVE-2026-102490
Undisclosed LPE in Zammad v1.5.0 to v7.1.0-alpha
All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
Severity
8.5High
Exploitation evidence
Has exploited
Remediation
Fixed in 7.1.0-alpha
Affected software
| Software | Affected versions | Fixed in | Sources |
|---|---|---|---|
CVSS (Common Vulnerability Scoring System)
Preferred assessment
Vector
Attack vector
Attack complexity
Privileges required
User interaction
Scope
Confidentiality impact
Integrity impact
Availability impact
Source assessments
EPSS (Exploit Prediction Scoring System)
Probability
Percentile
Model
Preferred remediation
Action