CVE-2026-56731
UNKNOWNDescription
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, a low-privilege authenticated user may inject arbitrary HTML markup, including JavaScript event handlers, into a ticket title via the standard ticket creation workflow. The title is persisted without sanitization. This issue is fixed in version 7.0.1.
Timeline
Published:September 25th, 2026 6:17 PM
Last modified:September 28th, 2026 2:45 PM
CVSS Scoring
No CVSS v3 score available
Weaknesses (CWE)
References & Reports
Advisories, patches, and third-party reports
Source: NIST NVD · Data may lag official sources by up to one minute