CVE-2026-102489 — Zammad GmbH Zammad Session Fixation Vulnerability

CISA’s Known Exploited Vulnerabilities Catalog lists CVE-2026-102489, affecting Zammad by Zammad GmbH and involving session fixation. CISA describes the KEV Catalog as the authoritative source for vulnerabilities exploited in the wild.