KEV Entry

CVE-2026-102489

Known Exploited Vulnerability Entry ENISA

Back to Catalog View Vulnerability
Entry Details
Confirmed Exploited

CVE-2026-102489

2026-09-30 02:00 CEST

Timestamps

2026-09-30

2026-09-30

Scope

Affected: Zammad / Zammad | Description: Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The vulnerability is also present in version 7.0.0 to version 7.1.3, but not exploitable due to environment conditions. | Patched since: 2026/04/08 | Exploitation type: unknown | Origin source: NCSC-NL | Notes: https://www.ncsc.nl/alerts/actief-misbruik-van-zeroday-kwetsbaarheden-in-zammad-update-nu

References
  • {'id': 'CVE-2026-102489', 'url': 'https://www.cve.org/CVERecord?id=CVE-2026-102489'}
  • {'id': 'EUVD-2026-90080', 'url': 'https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90080'}
  • {'id': 'source', 'url': 'https://www.ncsc.nl/alerts/actief-misbruik-van-zeroday-kwetsbaarheden-in-zammad-update-nu'}

9741ca20-f574-4fc6-b899-a2fccb65c863

ENISA
cce329bf-df49-4c6e-a027-80be2e6483bd

2026-10-02 08:52 CEST

2026-10-02 08:52 CEST

Evidence
1
Type Source Signal Confidence Details GCVE Metadata
csirt_report enisa-cnw-kev successful_exploitation 0.75
View details 
{
  "catalog": "ENISA / EU CSIRTs Network (CNW) KEV JSON",
  "cwes": [],
  "dateReported": "2026/09/30",
  "euvd": "EUVD-2026-90080",
  "exploitationType": [
    "unknown"
  ],
  "notes": "https://www.ncsc.nl/alerts/actief-misbruik-van-zeroday-kwetsbaarheden-in-zammad-update-nu",
  "originSource": "NCSC-NL",
  "patchedSince": "2026/04/08",
  "product": "Zammad",
  "threatActorsExploiting": [],
  "vendorProject": "Zammad",
  "vulnerabilityName": ""
}
 -
Export Options
JSON Object JSON API View Full Catalog