[CVE-2026-102490] Zammad GmbH Zammad — Zammad GmbH Zammad Improper Privilege Management Vulnerability

What happened?

Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489. Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable.

Key details

• Linux Kernel has an out-of-bounds write flaw in the ebtables SNAT target.
• The flaw allows an ARP sender hardware address rewrite to write into a nonlinear socket-buffer fragment.
• The affected socket-buffer fragment is backed by a splice-imported file page.
• The impacted product may be end-of-life or end-of-service.
• Users are advised to discontinue use or transition to a supported version.
• Forensic triage is required per BOD 26-04.

Summarised by SecOraLens from CISA KEV. Always read the original source before acting. How SecOraLens verifies advisories.