Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-39353 | critical | 9.1 | No | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2-rc-1, InvoicePlane builds... | 2026-09-28 |
| CVE-2026-84464 | not reported | — | No | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, zammad's External Data Source feature, used to look up r... | 2026-09-28 |
| CVE-2026-84461 | not reported | — | No | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, the two-factor login step let an attacker try unlimited... | 2026-09-28 |
| CVE-2026-84458 | not reported | — | No | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when the "Automatic account link on initial logon" setti... | 2026-09-28 |
| CVE-2026-63208 | not reported | — | No | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when a Microsoft Graph request fails, Zammad logs the er... | 2026-09-28 |
| CVE-2026-63206 | not reported | — | No | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, zammad's HTML sanitizer, which blocks remote images in t... | 2026-09-28 |
| CVE-2026-63204 | not reported | — | No | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, an authenticated user with agent permissions can supply... | 2026-09-28 |
| CVE-2026-61855 | not reported | — | No | Zammad is a web based open source helpdesk/customer support system. In 7.0.3 and 7.1.1, under certain conditions, Zammad's verification of i... | 2026-09-28 |
| CVE-2026-84462 | not reported | — | No | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, a security filter that protects Zammad's AI Agent config... | 2026-09-28 |
| CVE-2026-65828 | not reported | — | No | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, the legacy destroy_form action on AttachmentsController... | 2026-09-28 |
| CVE-2026-61525 | not reported | — | No | Zammad is a web based open source helpdesk/customer support system. In 7.0.2 and 7.1.0, zammad's session management for websocket and long-p... | 2026-09-28 |
| CVE-2026-56735 | not reported | — | No | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2 and 7.1.0, zammad's HTML sanitizer (HtmlSanitizer::Strict... | 2026-09-28 |
| CVE-2026-56733 | not reported | — | No | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2 and 7.1.0, this issue concerns a lack of discursive valid... | 2026-09-28 |
| CVE-2026-56732 | not reported | — | No | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, vulnerability in Zammad's HTML sanitization allows injec... | 2026-09-28 |
| CVE-2026-56731 | not reported | — | No | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, a low-privilege authenticated user may inject arbitrary... | 2026-09-28 |
| CVE-2026-56728 | not reported | — | No | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, a broken access control vulnerability exists in Zammad's... | 2026-09-28 |
| CVE-2026-56727 | not reported | — | No | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary In Zammad's inbound PGP email processing, the re... | 2026-09-28 |
| CVE-2026-56726 | not reported | — | No | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, this vulnerability breaks normal ticket isolation bounda... | 2026-09-28 |
| CVE-2026-56729 | not reported | — | No | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, when multiple KB categories have different editor roles... | 2026-09-28 |
| CVE-2026-56724 | not reported | — | No | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary An issue with permission checks in the knowledge... | 2026-09-28 |