The pattern no single source sees

Search

Stories, the companies and people Loro tracks, and the primary records behind them — filings, donations, contracts and disclosures.

Primary record2

Zammad GmbH Zammad: Zammad GmbH Zammad Session Fixation Vulnerability actively exploited

Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490. Required action: Apply mitigations in accord

02 Oct 2026 · cisa kev

Zammad GmbH Zammad: Zammad GmbH Zammad Improper Privilege Management Vulnerability actively exploited

Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489. Required action: App

02 Oct 2026 · cisa kev