https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:02:50.860897+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-376421 EUVD-2026-376421 2026-10-03T11:02:50.892285+00:00 EUVD-2026-376421 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56723 fkie_cve-2026-56723 2026-10-03T11:02:50.892318+00:00

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, a customer who can view a ticket cannot see internal ticket articles through the article listing API. However, the same customer can directly request an attachment belonging to an internal article via the attachment download endpoint, bypassing article-level authorization. This results in an inconsistency: The article listing hides internal articles from customers. The attachment download only checks the parent ticket, not the article, so the same customer can download the attachment directly. This issue is fixed in version 7.0.2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1981 WID-SEC-W-2026-1981 — Zammad: Mehrere Schwachstellen 2026-10-03T11:02:50.892352+00:00

Ein Angreifer kann mehrere Schwachstellen in Zammad ausnutzen, um Administratorrechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.