Vulnerability-Lookup

CVE-2026-34248 (GCVE-0-2026-34248)

Vulnerability from cvelistv5 – Published: 2026-04-08 18:00 – Updated: 2026-04-09 16:17

Title

Zammad has an information disclosure in ticket detail view of customers in shared organizations

Summary

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, customers in shared organizations (means they can see each other's tickets) could see fields which are not intended for customers - including fields not intended for them at all (e.g. priority, custom ticket attributes for internal purposes). This was the case when a customer opened a ticket from another user of the same shared organization. They are not able to modify these field. This vulnerability is fixed in 7.0.1.

Severity

2.1 (Low)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-284 - Improper Access Control

Assigner

GitHub_M

References

1 reference

URL	Tags
https://github.com/zammad/zammad/security/advisor…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
zammad	zammad	Affected: >= 7.0.0, < 7.0.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-34248",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-09T15:02:10.884544Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-09T16:17:40.442Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "zammad",
          "vendor": "zammad",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 7.0.0, \u003c 7.0.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, customers in shared organizations (means they can see each other\u0027s tickets) could see fields which are not intended for customers - including fields not intended for them at all (e.g. priority, custom ticket attributes for internal purposes). This was the case when a customer opened a ticket from another user of the same shared organization. They are not able to modify these field. This vulnerability is fixed in 7.0.1."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 2.1,
            "baseSeverity": "LOW",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "CWE-284: Improper Access Control",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-08T18:00:09.868Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/zammad/zammad/security/advisories/GHSA-prww-84vh-w978",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/zammad/zammad/security/advisories/GHSA-prww-84vh-w978"
        }
      ],
      "source": {
        "advisory": "GHSA-prww-84vh-w978",
        "discovery": "UNKNOWN"
      },
      "title": "Zammad has an information disclosure in ticket detail view of customers in shared organizations"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-34248",
    "datePublished": "2026-04-08T18:00:09.868Z",
    "dateReserved": "2026-03-26T16:22:29.035Z",
    "dateUpdated": "2026-04-09T16:17:40.442Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-34248",
      "date": "2026-08-02",
      "epss": "0.00193",
      "percentile": "0.09257"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-34248\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2026-04-08T19:25:21.567\",\"lastModified\":\"2026-07-24T22:10:00.140\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, customers in shared organizations (means they can see each other\u0027s tickets) could see fields which are not intended for customers - including fields not intended for them at all (e.g. priority, custom ticket attributes for internal purposes). This was the case when a customer opened a ticket from another user of the same shared organization. They are not able to modify these field. This vulnerability is fixed in 7.0.1.\"},{\"lang\":\"es\",\"value\":\"Zammad es un sistema de mesa de ayuda/soporte al cliente de c\u00f3digo abierto basado en web. Antes de la 7.0.1, los clientes en organizaciones compartidas (lo que significa que pueden ver los tickets de los dem\u00e1s) pod\u00edan ver campos que no est\u00e1n destinados a los clientes, incluyendo campos que no est\u00e1n destinados a ellos en absoluto (por ejemplo, prioridad, atributos de ticket personalizados para fines internos). Esto ocurr\u00eda cuando un cliente abr\u00eda un ticket de otro usuario de la misma organizaci\u00f3n compartida. No pod\u00edan modificar estos campos. Esta vulnerabilidad est\u00e1 corregida en la 7.0.1.\"}],\"affected\":[{\"source\":\"security-advisories@github.com\",\"affectedData\":[{\"vendor\":\"zammad\",\"product\":\"zammad\",\"versions\":[{\"version\":\"\u003e= 7.0.0, \u003c 7.0.1\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":2.1,\"baseSeverity\":\"LOW\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"PRESENT\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"PASSIVE\",\"vulnConfidentialityImpact\":\"LOW\",\"vulnIntegrityImpact\":\"NONE\",\"vulnAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N\",\"baseScore\":5.7,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.1,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-04-09T15:02:10.884544Z\",\"id\":\"CVE-2026-34248\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-284\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:zammad:zammad:7.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"830AF7C5-9441-4C80-935E-C53BDB097BB1\"}]}]}],\"references\":[{\"url\":\"https://github.com/zammad/zammad/security/advisories/GHSA-prww-84vh-w978\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "redhat_vex": {
      "current_release_date": "2026-04-09T19:23:19+00:00",
      "cve": "CVE-2026-34248",
      "id": "CVE-2026-34248",
      "initial_release_date": "2026-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "Zammad has an information disclosure in ticket detail view of customers in shared organizations",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34248.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"cna\": {\"title\": \"Zammad has an information disclosure in ticket detail view of customers in shared organizations\", \"source\": {\"advisory\": \"GHSA-prww-84vh-w978\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 2.1, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"LOW\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N\", \"userInteraction\": \"PASSIVE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"PRESENT\", \"privilegesRequired\": \"LOW\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"NONE\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"NONE\", \"subConfidentialityImpact\": \"NONE\", \"vulnConfidentialityImpact\": \"LOW\"}}], \"affected\": [{\"vendor\": \"zammad\", \"product\": \"zammad\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e= 7.0.0, \u003c 7.0.1\"}]}], \"references\": [{\"url\": \"https://github.com/zammad/zammad/security/advisories/GHSA-prww-84vh-w978\", \"name\": \"https://github.com/zammad/zammad/security/advisories/GHSA-prww-84vh-w978\", \"tags\": [\"x_refsource_CONFIRM\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, customers in shared organizations (means they can see each other\u0027s tickets) could see fields which are not intended for customers - including fields not intended for them at all (e.g. priority, custom ticket attributes for internal purposes). This was the case when a customer opened a ticket from another user of the same shared organization. They are not able to modify these field. This vulnerability is fixed in 7.0.1.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-284\", \"description\": \"CWE-284: Improper Access Control\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2026-04-08T18:00:09.868Z\"}}, \"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-34248\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-04-09T15:02:10.884544Z\"}}}], \"providerMetadata\": {\"shortName\": \"CISA-ADP\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"dateUpdated\": \"2026-04-09T15:02:15.659Z\"}}]}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-34248\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-04-08T18:00:09.868Z\", \"dateReserved\": \"2026-03-26T16:22:29.035Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2026-04-08T18:00:09.868Z\", \"assignerShortName\": \"GitHub_M\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2026-34248

Vulnerability from fkie_nvd - Published: 2026-04-08 19:25 - Updated: 2026-06-17 10:38

Severity

5.7 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Summary

References

	URL	Tags
	security-advisories@github.com	https://github.com/zammad/zammad/security/advisories/GHSA-prww-84vh-w978	Vendor Advisory

Impacted products

	Vendor	Product	Version
	zammad	zammad	7.0.0

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "zammad",
          "vendor": "zammad",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 7.0.0, \u003c 7.0.1"
            }
          ]
        }
      ],
      "source": "security-advisories@github.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:zammad:zammad:7.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "830AF7C5-9441-4C80-935E-C53BDB097BB1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, customers in shared organizations (means they can see each other\u0027s tickets) could see fields which are not intended for customers - including fields not intended for them at all (e.g. priority, custom ticket attributes for internal purposes). This was the case when a customer opened a ticket from another user of the same shared organization. They are not able to modify these field. This vulnerability is fixed in 7.0.1."
    }
  ],
  "id": "CVE-2026-34248",
  "lastModified": "2026-06-17T10:38:43.637",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 5.7,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 2.1,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "PRESENT",
          "attackVector": "NETWORK",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 2.1,
          "baseSeverity": "LOW",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "LOW",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "PASSIVE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "NONE",
          "vulnConfidentialityImpact": "LOW",
          "vulnIntegrityImpact": "NONE",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-34248",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-04-09T15:02:10.884544Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-04-08T19:25:21.567",
  "references": [
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://github.com/zammad/zammad/security/advisories/GHSA-prww-84vh-w978"
    }
  ],
  "sourceIdentifier": "security-advisories@github.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ],
      "source": "security-advisories@github.com",
      "type": "Secondary"
    }
  ]
}

WID-SEC-W-2026-1000

Vulnerability from csaf_certbund - Published: 2026-04-07 22:00 - Updated: 2026-04-08 22:00

Summary

Zammad: Mehrere Schwachstellen

Severity

Mittel

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Zammad ist ein Helpdesk- und Ticketsystem.

Angriff: Ein Angreifer kann mehrere Schwachstellen in Zammad ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, und um einen Cross-Site Scripting Angriff durchzuführen.

Betroffene Betriebssysteme: - Linux - UNIX

CVE-2026-34248

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
Zammad Zammad <7.0.1 Zammad / Zammad		<7.0.1
Zammad Zammad <6.5.4 Zammad / Zammad		<6.5.4

CVE-2026-34718

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
Zammad Zammad <7.0.1 Zammad / Zammad		<7.0.1
Zammad Zammad <6.5.4 Zammad / Zammad		<6.5.4

CVE-2026-34719

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
Zammad Zammad <7.0.1 Zammad / Zammad		<7.0.1
Zammad Zammad <6.5.4 Zammad / Zammad		<6.5.4

CVE-2026-34720

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
Zammad Zammad <7.0.1 Zammad / Zammad		<7.0.1
Zammad Zammad <6.5.4 Zammad / Zammad		<6.5.4

CVE-2026-34721

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
Zammad Zammad <7.0.1 Zammad / Zammad		<7.0.1
Zammad Zammad <6.5.4 Zammad / Zammad		<6.5.4

CVE-2026-34722

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
Zammad Zammad <7.0.1 Zammad / Zammad		<7.0.1
Zammad Zammad <6.5.4 Zammad / Zammad		<6.5.4

CVE-2026-34723

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
Zammad Zammad <7.0.1 Zammad / Zammad		<7.0.1
Zammad Zammad <6.5.4 Zammad / Zammad		<6.5.4

CVE-2026-34724

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
Zammad Zammad <7.0.1 Zammad / Zammad		<7.0.1
Zammad Zammad <6.5.4 Zammad / Zammad		<6.5.4

CVE-2026-34782

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
Zammad Zammad <7.0.1 Zammad / Zammad		<7.0.1
Zammad Zammad <6.5.4 Zammad / Zammad		<6.5.4

CVE-2026-34837

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
Zammad Zammad <7.0.1 Zammad / Zammad		<7.0.1
Zammad Zammad <6.5.4 Zammad / Zammad		<6.5.4

References

13 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://zammad.com/en/product/releases/7-0-1	external
https://github.com/zammad/zammad/security/advisor…	external
https://github.com/zammad/zammad/security/advisor…	external
https://github.com/zammad/zammad/security/advisor…	external
https://github.com/zammad/zammad/security/advisor…	external
https://github.com/zammad/zammad/security/advisor…	external
https://github.com/zammad/zammad/security/advisor…	external
https://github.com/zammad/zammad/security/advisor…	external
https://github.com/zammad/zammad/security/advisor…	external
https://github.com/zammad/zammad/security/advisor…	external
https://github.com/zammad/zammad/security/advisor…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Zammad ist ein Helpdesk- und Ticketsystem.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Zammad ausnutzen, um beliebigen Programmcode auszuf\u00fchren, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, und um einen Cross-Site Scripting Angriff durchzuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- UNIX",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-1000 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1000.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-1000 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1000"
      },
      {
        "category": "external",
        "summary": "Zammad Security Releases 7.0.1 + 6.5.4 vom 2026-04-07",
        "url": "https://zammad.com/en/product/releases/7-0-1"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-28m3-wwgv-ppw8 vom 2026-04-07",
        "url": "https://github.com/zammad/zammad/security/advisories/GHSA-28m3-wwgv-ppw8"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-2vgc-vfh2-rw75 vom 2026-04-07",
        "url": "https://github.com/zammad/zammad/security/advisories/GHSA-2vgc-vfh2-rw75"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-89vv-6639-wcv8 vom 2026-04-07",
        "url": "https://github.com/zammad/zammad/security/advisories/GHSA-89vv-6639-wcv8"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-96r7-29c8-2j7q vom 2026-04-07",
        "url": "https://github.com/zammad/zammad/security/advisories/GHSA-96r7-29c8-2j7q"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-c2cf-9fc7-jhf3 vom 2026-04-07",
        "url": "https://github.com/zammad/zammad/security/advisories/GHSA-c2cf-9fc7-jhf3"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-fg9w-jg8f-4j94 vom 2026-04-07",
        "url": "https://github.com/zammad/zammad/security/advisories/GHSA-fg9w-jg8f-4j94"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-hcm9-ch62-5727 vom 2026-04-07",
        "url": "https://github.com/zammad/zammad/security/advisories/GHSA-hcm9-ch62-5727"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-hcv6-w4h9-p2p7 vom 2026-04-07",
        "url": "https://github.com/zammad/zammad/security/advisories/GHSA-hcv6-w4h9-p2p7"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-mfwp-hx66-626c vom 2026-04-07",
        "url": "https://github.com/zammad/zammad/security/advisories/GHSA-mfwp-hx66-626c"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-prww-84vh-w978 vom 2026-04-07",
        "url": "https://github.com/zammad/zammad/security/advisories/GHSA-prww-84vh-w978"
      }
    ],
    "source_lang": "en-US",
    "title": "Zammad: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-04-08T22:00:00.000+00:00",
      "generator": {
        "date": "2026-04-09T08:09:21.793+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2026-1000",
      "initial_release_date": "2026-04-07T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-04-07T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2026-04-08T22:00:00.000+00:00",
          "number": "2",
          "summary": "Referenz(en) aufgenommen: EUVD-2026-20566, EUVD-2026-20564, EUVD-2026-20563, EUVD-2026-20562, EUVD-2026-20561, EUVD-2026-20560, EUVD-2026-20559, EUVD-2026-20558, EUVD-2026-20568, EUVD-2026-20556"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c7.0.1",
                "product": {
                  "name": "Zammad Zammad \u003c7.0.1",
                  "product_id": "T052500"
                }
              },
              {
                "category": "product_version",
                "name": "7.0.1",
                "product": {
                  "name": "Zammad Zammad 7.0.1",
                  "product_id": "T052500-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:zammad:zammad:7.0.1"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c6.5.4",
                "product": {
                  "name": "Zammad Zammad \u003c6.5.4",
                  "product_id": "T052501"
                }
              },
              {
                "category": "product_version",
                "name": "6.5.4",
                "product": {
                  "name": "Zammad Zammad 6.5.4",
                  "product_id": "T052501-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:zammad:zammad:6.5.4"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Zammad"
          }
        ],
        "category": "vendor",
        "name": "Zammad"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-34248",
      "product_status": {
        "known_affected": [
          "T052500",
          "T052501"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-34248"
    },
    {
      "cve": "CVE-2026-34718",
      "product_status": {
        "known_affected": [
          "T052500",
          "T052501"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-34718"
    },
    {
      "cve": "CVE-2026-34719",
      "product_status": {
        "known_affected": [
          "T052500",
          "T052501"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-34719"
    },
    {
      "cve": "CVE-2026-34720",
      "product_status": {
        "known_affected": [
          "T052500",
          "T052501"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-34720"
    },
    {
      "cve": "CVE-2026-34721",
      "product_status": {
        "known_affected": [
          "T052500",
          "T052501"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-34721"
    },
    {
      "cve": "CVE-2026-34722",
      "product_status": {
        "known_affected": [
          "T052500",
          "T052501"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-34722"
    },
    {
      "cve": "CVE-2026-34723",
      "product_status": {
        "known_affected": [
          "T052500",
          "T052501"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-34723"
    },
    {
      "cve": "CVE-2026-34724",
      "product_status": {
        "known_affected": [
          "T052500",
          "T052501"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-34724"
    },
    {
      "cve": "CVE-2026-34782",
      "product_status": {
        "known_affected": [
          "T052500",
          "T052501"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-34782"
    },
    {
      "cve": "CVE-2026-34837",
      "product_status": {
        "known_affected": [
          "T052500",
          "T052501"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-34837"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.

Action not permitted

CVE-2026-34248 (GCVE-0-2026-34248)

FKIE_CVE-2026-34248

WID-SEC-W-2026-1000

Tags

Sightings

Nomenclature