Known vulnerabilities in Zammad 7.2.0-alpha
Vendor:
Zammad
Software:
Zammad
Version:
7.2.0-alpha
Software CPE:
cpe:2.3:a:zammad:zammad:*:*:*:*:*:*:*:*
Website:
https://zammad.com/
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
2
Vulnerabilities by Severity
6.5.5
7.2.2
7.2.1
7.3.0-alpha
7.2.0-alpha
7.2.0
7.1.3
7.1.2
7.1.1
7.1.0-alpha
7.1.0
7.0.3
7.0.2
7.0.1
7.0.0-alpha
7.0.0
6.6.0-alpha
6.5.4
6.5.3
6.5.2
6.5.1
6.5.0-alpha
6.5.0
6.4.2
6.4.1
6.4.0-alpha
6.4.0
6.3.1
6.3.0-alpha
6.3.0
6.2.0-alpha
6.2.0
6.1.0-alpha
6.1.0
6.0.0-alpha
6.0.0
5.5.0-alpha
5.4.1
5.4.0-alpha
5.4.0
5.3.1
5.3.0-alpha
5.3.0
5.2.3
5.2.2
5.2.1
5.2.0-alpha
5.2.0
5.1.1
5.1.0
5.0.3
5.0.2
5.0.1
5.0.0
4.1.1
4.1.0
4.0.1
4.0.0
3.7.0
3.6.1
3.6.0
3.5.1
3.5.0
3.4.1
3.4.0
3.3.1
3.3.0
3.2.1
3.2.0
3.1.1
3.1.0
3.0.1
3.0.0
2.10.0
2.9.0
2.8.1
2.8.0
2.7.2
2.7.1
2.7.0
2.6.1
2.6.0
2.5.1
2.5.0
2.4.1
2.4.0
2.3.1
2.3.0
2.2.2
2.2.1
2.2.0
2.1.2
2.1.1
2.1.0
2.0.1
2.0.0
1.6.1
1.6.0
1.5.1
1.5.0
1.4.1
1.4.0
1.3.2
1.3.1
1.3.0
1.2.3
1.2.2
1.2.1
1.2.0
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.4
1.0.3
1.0.2
1.0.1
1.0.0
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU153893 - Insertion of Sensitive Information Into Sent Data |
CWE-201 | Medium | 7.2.1 | 07.10.2026 |
SB20261007227 |
||
| #VU153199 - Incorrect Default Permissions CVE-2026-102490 |
CWE-276 | High | - | 02.10.2026 |
SB2026100263 |
||
| #VU153198 - Session Fixation CVE-2026-102489 |
CWE-384 | Critical | - | 02.10.2026 |
SB2026100263 |