Security Feed
See the latest insights and analysis from our MDR team.
RSS for SlackCVE-2026-102489, CVE-2026-102490
By Nevo Evenhaim |
2 October 2026
CVE-2026-102489 + CVE-2026-102490 – Zammad session hijack RCE + local privilege escalation to root (chain)
Two critical Zammad vulnerabilities can be chained for full remote compromise: CVE-2026-102489 allows unauthenticated attackers to hijack sessions and execute code as the zammad user (Affected: 6.3.0-`