{
  "id": "CVE-2026-102489",
  "vendor_project": "Zammad GmbH",
  "product": "Zammad",
  "description": "Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490.",
  "kev_date_added": "2026-10-02",
  "cvss": 9.0,
  "severity": "High",
  "advisories": [],
  "cited_in_cases": [],
  "indictment_cited": false
}