CVE-2026-102489 CISA KEV · Actively exploited
Undisclosed RCE in Zammad v6.3 and higher
CVSS score
8.7
EPSS probability
%1.3
Risk score
0.2
Published
15 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Hunt-Benito/the-cookie-in-the-error-message-cve-2026-102489-zammad-session-hijack-to-rce
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2022-30333 Actively exploited
Path traversal in N/a
N
Patch verifiedEPSS %99
7.8
CVE-2022-0847 Actively exploited
kernel: improper initialization of the "flags" member of the new pipe_buffer
RH
Patch verified Public Exploits:8EPSS %93
7.8
CVE-2018-15982 Actively exploited
Use after free in N/a
N
Patch verified Public Exploits:1EPSS %90
7.8
CVE-2019-13272 Actively exploited
kernel: broken permission and object lifetime handling for PTRACE_TRACEME
RH
Patch verified Public Exploits:12EPSS %52
7.4
CVE-2021-3493 Actively exploited
kernel: overlayfs file system caps privilege escalation
L
Workaround Public Exploits:8EPSS %49
7.5
CVE-2025-22037
ksmbd: fix null pointer dereference in alloc_preauth_hash()
L
Patch verifiedEPSS %70
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-102489"