Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the REST endpoint POST /api/v1/ai_assistance/text_tools/:id was not checking if a user is privileged to use the text tool, resulting in being able to use it in all situations. This vulnerability is fixed in 7.0.1 and 6.5.4.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-34782 Unauthorized Access to AI Assistance Text Tools in Zammad Before 7.0.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-34782
Post summary
The entry announces CVE-2026-34782, describing unauthorized access to AI assistance text tools in Zammad versions before 7.0.1, with no PoC or patch information provided.
CVE-2026-34782 Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the REST endpoint POST /api/v1/ai_assistance/text_tools/:id was not chec… https://www.cve.org/CVERecord?id=CVE-2026-34782
Post summary
The snippet announces a vulnerability in Zammad’s AI assistance endpoint (CVE-2026-34782), providing the affected REST API details but no exploit code, patch, or evidence of active exploitation.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | zammad | zammad | - | - | - |
| App | zammad | zammad | 7.0.0 | - | - |