https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:23:42.915277+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-227415 EUVD-2026-227415 2026-10-03T22:23:42.938384+00:00 EUVD-2026-227415 https://cve.radiocsirt.org/vuln/fkie_cve-2025-32360 fkie_cve-2025-32360 2026-10-03T22:23:42.938420+00:00

In Zammad 6.4.x before 6.4.2, there is information exposure. Only agents should be able to see and work on shared article drafts. However, a logged in customer was able to see details about shared drafts for their customer tickets in the browser console, which may contain confidential information, and also to manipulate them via API.

 https://cve.radiocsirt.org/vuln/ghsa-cqmw-qrqr-v255 GHSA-cqmw-qrqr-v255 2026-10-03T22:23:42.938451+00:00

In Zammad 6.4.x before 6.4.2, there is information exposure. Only agents should be able to see and work on shared article drafts. However, a logged in customer was able to see details about shared drafts for their customer tickets in the browser console, which may contain confidential information, and also to manipulate them via API.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0684 WID-SEC-W-2025-0684 — Zammad: Mehrere Schwachstellen 2026-10-03T22:23:42.938469+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Zammad ausnutzen, um Informationen offenzulegen oder Sicherheitsvorkehrungen zu umgehen.