https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T07:28:24.580676+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-34724 CVE-2026-34724 — Zammad has a server-side template injection leading to RCE via AI Agent 2026-10-06T07:28:24.597078+00:00

Affected: zammad

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, a server-side template injection vulnerability which leads to RCE via AI Agent exists. Impact is limited to environments where an attacker can control or influence type_enrichment_data (typically high-privilege administrative configuration). This vulnerability is fixed in 7.0.1.