Search: CVE-2026-102489

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	KEVEPSS 49%	CVE-2026-102489Zammad · Undisclosed RCE High8.7KEVEPSS 49%2026-09-30CVE Database V5CVE-2026-102489 Zammad versions 6.3.0 through 6.5.3 contain a session hijacking vulnerability that can lead to remote code execution as the zammad user. Versions 7.0.0 through 7.1.2 also contain the bug, but it is not exploitable due to framework changes. The vulnerability has a high severity with a CVSS 4.0 score of 8.7. KEVEPSS 49%Vulnerability CWE-384 #ghsa-xmw5-m2wg-4243	CVE Database V5	2026-09-30

Page 1 of 1