PT-2026-31421 · Zammad · Zammad

Published 2026-04-08 · Updated 2026-04-09 · CVE-2026-34724

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.0.1

Description Zammad is a web-based open-source helpdesk/customer support system. A server-side template injection vulnerability exists via the AI Agent, potentially leading to Remote Code Execution (RCE). The impact is limited to environments where an attacker can control or influence the type enrichment data variable, typically within high-privilege administrative configurations. Approximately 5,400 systems are publicly indexed.

Recommendations Update to version 7.0.1 or later.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

CWE-1336

Related Identifiers

CVE-2026-34724

Affected Products

Zammad

References · 5

• https://github.com/zammad/zammad/security/advisories/GHSA-fg9w-jg8f-4j94 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34724 · Security Note
• https://twitter.com/CVEnew/status/2041975597778284928 · Twitter Post
• https://twitter.com/fofabot/status/2042164505581609174 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2042059981420138787 · Twitter Post