<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>VulnFeed.org: Zammad GmbH Zammad</title><link>https://vulnfeed.org/</link><description>Every disclosure, as it lands. Critical-only feed available.</description><language>en</language><atom:link href="https://vulnfeed.org/feed/product/zammad-gmbh-zammad.xml" rel="self" type="application/rss+xml"/><item><title>CVE-2026-102490: Zammad GmbH Zammad Improper Privilege Management Vulnerability</title><link>https://vulnfeed.org/cve/CVE-2026-102490/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-102490/</guid><pubDate>Fri, 02 Oct 2026 00:00:00 +0000</pubDate><description>Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489.</description></item><item><title>CVE-2026-102489: Zammad GmbH Zammad Session Fixation Vulnerability</title><link>https://vulnfeed.org/cve/CVE-2026-102489/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-102489/</guid><pubDate>Fri, 02 Oct 2026 00:00:00 +0000</pubDate><description>Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490.</description></item></channel></rss>
