Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, a server-side template injection vulnerability which leads to RCE via AI Agent exists. Impact is limited to environments where an attacker can control or influence type_enrichment_data (typically high-privilege administrative configuration). This vulnerability is fixed in 7.0.1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-34724 Server-Side Template Injection Remote Code Execution in Zammad Before 7.0.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-34724
Post summary
The text announces a Server‑Side Template Injection that enables remote code execution in Zammad versions earlier than 7.0.1, but it does not provide PoC code, exploit tools, or patch information.
CVE-2026-34724 Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, a server-side template injection vulnerability which leads to RCE via AI Agent ex… https://www.cve.org/CVERecord?id=CVE-2026-34724
Post summary
The post describes a server‑side template injection in Zammad 7.0.1 and newer versions, which can lead to remote code execution, but does not provide evidence of active exploitation, a PoC, or a patch.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | zammad | zammad | 7.0.0 | - | - |