|
cve-2026-84464
|
|
Zammad: IDOR in External Data Source rendering exposes…
|
zammad
|
zammad
|
2026-09-25T18:18:40.193Z |
2026-09-25T19:03:46.965Z |
|
cve-2026-63216
|
|
Zammad: Stored XSS via unescaped option labels in the …
|
zammad
|
zammad
|
2026-09-25T18:16:01.483Z |
2026-09-29T19:41:42.455Z |
|
cve-2026-84458
|
|
Zammad: Account takeover via unverified email matching…
|
zammad
|
zammad
|
2026-09-25T18:15:26.900Z |
2026-09-25T19:05:02.610Z |
|
cve-2026-97895
|
|
krayin laravel-crm User Management UserController.php …
|
krayin
|
laravel-crm
|
2026-09-25T18:15:17.276Z |
2026-09-25T18:40:39.301Z |
|
cve-2026-84460
|
|
Zammad: Missing Authorization in TagsController#list A…
|
zammad
|
zammad
|
2026-09-25T18:14:49.086Z |
2026-09-29T18:09:59.192Z |
|
cve-2026-63206
|
|
Zammad: Remote image tracking bypass via shortened URL…
|
zammad
|
zammad
|
2026-09-25T18:14:06.612Z |
2026-09-25T19:46:54.438Z |
|
cve-2026-63205
|
|
Zammad: Channel admins can read unauthorized attachmen…
|
zammad
|
zammad
|
2026-09-25T18:13:25.176Z |
2026-09-29T19:40:34.778Z |
|
cve-2026-97064
|
9.3 (v4.0)
9.1 (v3.1)
|
X-SpringBoot through 6.0 Authentication Bypass via Sta…
|
yzcheng90
|
X-SpringBoot
|
2026-09-25T18:12:19.819Z |
2026-09-30T17:29:32.113Z |
|
cve-2026-97063
|
9.3 (v4.0)
9.1 (v3.1)
|
X-SpringBoot through 6.0 Authentication Bypass via Log…
|
yzcheng90
|
X-SpringBoot
|
2026-09-25T18:12:19.119Z |
2026-09-25T18:40:04.260Z |
|
cve-2026-97060
|
8.6 (v4.0)
7.2 (v3.1)
|
X-SpringBoot through 6.0 Authorization Bypass via User…
|
yzcheng90
|
X-SpringBoot
|
2026-09-25T18:12:18.423Z |
2026-09-29T18:23:02.488Z |
|
cve-2026-100192
|
6.9 (v4.0)
6.5 (v3.1)
|
X-SpringBoot through 6.0 Credential Exposure via Unaut…
|
yzcheng90
|
X-SpringBoot
|
2026-09-25T18:12:17.702Z |
2026-09-29T19:38:51.593Z |
|
cve-2026-97886
|
|
mathurvishal CloudClassroom-PHP-Project managevideos2.…
|
mathurvishal
|
CloudClassroom-PHP-Project
|
2026-09-25T18:00:16.790Z |
2026-09-29T18:10:56.793Z |
|
cve-2026-91841
|
7.8 (v3.1)
|
Networkmanager-vpnc: networkmanager-vpnc: incomplete f…
|
GNOME
|
NetworkManager-vpnc
|
2026-09-25T17:56:34.223Z |
2026-09-28T12:43:47.658Z |
|
cve-2026-91840
|
7.8 (v3.1)
|
Networkmanager-vpnc: networkmanager-vpnc: local privil…
|
GNOME
|
NetworkManager-vpnc
|
2026-09-25T17:56:32.736Z |
2026-09-28T12:44:17.583Z |
|
cve-2026-91839
|
7.8 (v3.1)
|
Networkmanager-fortisslvpn: networkmanager-fortisslvpn…
|
GNOME
|
NetworkManager-fortisslvpn
|
2026-09-25T17:56:31.225Z |
2026-09-28T12:44:46.096Z |
|
cve-2026-91838
|
7.8 (v3.1)
|
Networkmanager-sstp: networkmanager-sstp: local privil…
|
GNOME
|
NetworkManager-sstp
|
2026-09-25T17:51:44.357Z |
2026-09-25T18:16:17.928Z |
|
cve-2026-97885
|
|
mathurvishal CloudClassroom-PHP-Project updatefaculty.…
|
mathurvishal
|
CloudClassroom-PHP-Project
|
2026-09-25T17:45:06.202Z |
2026-09-25T18:10:30.478Z |
|
cve-2026-97884
|
|
mathurvishal CloudClassroom-PHP-Project Student Update…
|
mathurvishal
|
CloudClassroom-PHP-Project
|
2026-09-25T17:30:10.674Z |
2026-09-25T18:39:31.824Z |
|
cve-2026-84462
|
|
Zammad: AI Agent template sanitizer bypass leads to re…
|
zammad
|
zammad
|
2026-09-25T17:29:15.837Z |
2026-09-25T18:11:30.745Z |
|
cve-2026-65828
|
|
Zammad: Pending upload deletion bypass via legacy atta…
|
zammad
|
zammad
|
2026-09-25T17:28:13.159Z |
2026-09-25T18:38:58.822Z |
|
cve-2026-97883
|
|
mathurvishal CloudClassroom-PHP-Project updatequery.ph…
|
mathurvishal
|
CloudClassroom-PHP-Project
|
2026-09-25T17:15:05.865Z |
2026-09-25T17:27:48.523Z |
|
cve-2026-61525
|
|
Zammad: Arbitrary File Deletion via Unvalidated Sessio…
|
zammad
|
zammad
|
2026-09-25T17:11:33.499Z |
2026-09-25T17:31:01.884Z |
|
cve-2026-56728
|
|
Zammad: Cross-User Taskbar Item Access Control Vulnerability
|
zammad
|
zammad
|
2026-09-25T17:10:16.262Z |
2026-09-25T18:38:22.817Z |
|
cve-2026-56725
|
|
Zammad: Denial of Service via OTRS Import Controller
|
zammad
|
zammad
|
2026-09-25T17:09:05.633Z |
2026-09-29T19:37:24.906Z |
|
cve-2026-56732
|
|
Zammad: Malicious input in Ticket Body Enables Session…
|
zammad
|
zammad
|
2026-09-25T17:08:20.324Z |
2026-09-25T17:41:20.304Z |
|
cve-2026-56730
|
|
Zammad: Missing authorization in GraphQL mutation for …
|
zammad
|
zammad
|
2026-09-25T17:07:02.910Z |
2026-09-29T19:35:59.021Z |
|
cve-2026-56733
|
|
Zammad: Incorrect Authorization and Improper Privilege…
|
zammad
|
zammad
|
2026-09-25T17:05:56.215Z |
2026-09-25T18:37:48.132Z |
|
cve-2026-56731
|
|
Zammad: Cross-Site Scripting in Ticket Notifications
|
zammad
|
zammad
|
2026-09-25T17:04:50.332Z |
2026-09-25T19:42:58.050Z |
|
cve-2026-56735
|
|
Zammad: Improper neutralization of `srcset` attribute …
|
zammad
|
zammad
|
2026-09-25T17:04:03.247Z |
2026-09-25T19:06:35.154Z |
|
cve-2026-56727
|
|
Zammad: PGP signature spoofing via unvalidated verific…
|
zammad
|
zammad
|
2026-09-25T17:02:39.020Z |
2026-09-25T17:42:09.284Z |