DEV Community

#zammad

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Zammad's two flaws were chained in seconds by an automated agent, and the second one is about service accounts

Zammad's two flaws were chained in seconds by an automated agent, and the second one is about service accounts

Comments
5 min read
Zammad CVE-2026-102489 and CVE-2026-102490: When the Support Desk Becomes the Entry Point

Zammad CVE-2026-102489 and CVE-2026-102490: When the Support Desk Becomes the Entry Point

Comments
3 min read
From Service Account to Root: What CVE-2026-102490 Actually Buys an Attacker

From Service Account to Root: What CVE-2026-102490 Actually Buys an Attacker

Comments
2 min read
Inside CVE-2026-102489: The Zammad Session Hijack That Ends in Code Execution

Inside CVE-2026-102489: The Zammad Session Hijack That Ends in Code Execution

Comments
5 min read
Session Hijacking as a Beachhead: CVE-2026-102489 and the Zammad Root Chain

Session Hijacking as a Beachhead: CVE-2026-102489 and the Zammad Root Chain

Comments
2 min read
When an Agent Reaches Root: The Zammad Attack and Machine-Speed Intrusion

When an Agent Reaches Root: The Zammad Attack and Machine-Speed Intrusion

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.