CVE-2026-56729

low

Description

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, when multiple KB categories have different editor roles assigned, a user with knowledge_base.editor in one category can see answer titles and updated_at timestamps from categories they do not have editor access to , via the global quick search. Category names are not leaked, and opening the answer returns "Page not found," but the title alone may disclose sensitive information. This vulnerability is fixed in 7.0.2.

References

https://github.com/zammad/zammad/security/advisories/GHSA-4m54-p3mr-22g2

https://github.com/zammad/zammad/commit/de5dc4195829e0e1a64307d60c9e06e0e781ab37

https://github.com/zammad/zammad/commit/7b6c0adec006e036c9e605c4141a091a6e08aadf

https://github.com/zammad/zammad/commit/5076aa1e3081146f826ffaef686c89935fdb4393

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87208

Details

Source: Mitre, NVD

Published: 2026-09-25

Updated: 2026-09-28

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 4.3

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Severity: Medium

CVSS v4

Base Score: 2.1

Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Severity: Low

EPSS

EPSS: 0.00377