All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
严重 CVSS 9.8 CISA KEV 在册
摘要
All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。
深度研判
该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。
受影响产品
- :
- Zammad GmbH:Zammad
数据来源
- NVD DATABASE
- CISA KEV DATABASE
- Grok bot vulnerability crawler DATABASE
原始链接
- https://csirt.divd.nl/CVE-2026-102490
- https://csirt.divd.nl/DIVD-2026-00015
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102490 US Government Resource
- https://zammad.com/en/product/releases/ reference
- https://community.zammad.org/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297/2 reference
- https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk reference
- https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk reference
- https://nvd.nist.gov/vuln/detail/CVE-2026-102490 reference
时间线
- nvd_ingest NVD
- kev_ingest CISA KEV
- grok_bot_ingest Grok bot vulnerability crawler