
Vulnerabilities
Horizon3.ai Discovers Actively Exploited Zammad Vulnerability CVE-2026-102489
Research from Horizon3.ai reveals a critical flaw in Zammad that attackers are using to hijack user sessions via WebSocket errors.
Everything Threat Times has reported about Zammad: 2 stories, newest first. Part of our Vulnerabilities coverage.

Research from Horizon3.ai reveals a critical flaw in Zammad that attackers are using to hijack user sessions via WebSocket errors.

A vulnerability in the Zammad customer support platform allows attackers to leak session data and execute remote code, according to a community analysis.