CVE-2026-13229

Description

Zammad 7.1.0 contains an authenticated improper authorization vulnerability in the ticket article attachment cloning endpoint.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://fluidattacks.com/es/advisories/chicago ↗
• https://github.com/zammad/zammad/security/advisories/GHSA-374g-4f73-g7m7 ↗
• https://github.com/zammad/zammad/releases/tag/7.1.2 ↗
• https://github.com/zammad/zammad ↗