CVE-2026-102490: All versions of Zammad including the latest alpha enable
All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
- CISA KEV-listed (remediation due 2026-10-05)
- EPSS 0.3% (16.3% percentile)
- CVSS 9.4 critical