Zammad vulnerabilities: Find impacted installations

Two high-severity vulnerabilities in the Zammad help-desk application (CVE-2026-102489 and CVE-2026-102490) enable session hijacking with potential RCE and local privilege escalation to root; both are rated high (CVSS 8.7 and 8.5) and reported as actively exploited in the wild (added to CISA KEV). Administrators are advised to upgrade to Zammad 7.2.0 or later where fixes are available and to monitor vendor advisories for updates on the unresolved LPE issue.