GhostLayer Insights

Subscribe

Zammad

  • CVE-2026-102490

    Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as…

  • CVE-2026-102489

    Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The…