{"api_version":"v1","generated_at":"2026-10-07T20:50:00+00:00","product":{"cve_count":41,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-zammad-zammad-67ed36c8e112","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"Zammad","next_cursor":null,"observations":[{"affected":"Zammad: 1.5.0 < 7.1.0-alpha, * < 1.5.0","affected_versions_present":true,"cve_id":"CVE-2026-102490","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-102490","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-10-05T10:25:49.718Z","patch_url":"","primary_source":"","published":"2026-09-30T16:21:20.601Z"},{"affected":"Zammad: * < 6.3.0, 6.3.0 < 6.5.4","affected_versions_present":true,"cve_id":"CVE-2026-102489","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-102489","fixed":"Zammad: 7.0.0 < *","last_modified":"2026-10-05T10:25:49.386Z","patch_url":"https://csirt.divd.nl/DIVD-2026-00015","primary_source":"","published":"2026-09-30T16:21:19.937Z"},{"affected":"zammad: < 7.1.2","affected_versions_present":true,"cve_id":"CVE-2026-63208","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63208","fixed":"7.1.2.","last_modified":"2026-09-25T18:42:12.452Z","patch_url":"https://github.com/zammad/zammad/security/advisories/GHSA-qh8m-g5vr-7272","primary_source":"","published":"2026-09-25T18:23:47.098Z"},{"affected":"zammad: < 7.1.2","affected_versions_present":true,"cve_id":"CVE-2026-63006","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63006","fixed":"7.1.2.","last_modified":"2026-09-29T18:03:56.994Z","patch_url":"https://github.com/zammad/zammad/security/advisories/GHSA-33p2-cm7w-62g3","primary_source":"","published":"2026-09-25T18:23:13.578Z"},{"affected":"zammad: < 7.1.2","affected_versions_present":true,"cve_id":"CVE-2026-63204","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63204","fixed":"7.1.2.","last_modified":"2026-09-25T18:41:43.228Z","patch_url":"https://github.com/zammad/zammad/security/advisories/GHSA-75j9-hpg4-j9f8","primary_source":"","published":"2026-09-25T18:22:40.491Z"},{"affected":"zammad: < 7.1.2","affected_versions_present":true,"cve_id":"CVE-2026-61855","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-61855","fixed":"7.1.2.","last_modified":"2026-09-25T19:02:38.605Z","patch_url":"https://github.com/zammad/zammad/security/advisories/GHSA-r957-vp26-563q","primary_source":"","published":"2026-09-25T18:21:55.462Z"},{"affected":"zammad: < 7.1.2","affected_versions_present":true,"cve_id":"CVE-2026-84461","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-84461","fixed":"7.1.2.","last_modified":"2026-09-25T18:41:14.822Z","patch_url":"https://github.com/zammad/zammad/security/advisories/GHSA-6vh5-pfp2-5rmh","primary_source":"","published":"2026-09-25T18:21:20.015Z"},{"affected":"zammad: < 7.1.2","affected_versions_present":true,"cve_id":"CVE-2026-63207","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63207","fixed":"7.1.2.","last_modified":"2026-09-29T18:06:28.995Z","patch_url":"https://github.com/zammad/zammad/security/advisories/GHSA-48h2-wv8r-fgp9","primary_source":"","published":"2026-09-25T18:20:44.058Z"},{"affected":"zammad: < 7.1.2","affected_versions_present":true,"cve_id":"CVE-2026-84465","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-84465","fixed":"7.1.2.","last_modified":"2026-09-29T18:08:05.375Z","patch_url":"https://github.com/zammad/zammad/security/advisories/GHSA-m9ff-hjr3-93h4","primary_source":"","published":"2026-09-25T18:19:58.735Z"},{"affected":"zammad: < 7.1.2","affected_versions_present":true,"cve_id":"CVE-2026-84463","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-84463","fixed":"7.1.2.","last_modified":"2026-09-29T19:42:48.916Z","patch_url":"https://github.com/zammad/zammad/security/advisories/GHSA-cxjg-4gmf-5xqc","primary_source":"","published":"2026-09-25T18:19:19.193Z"},{"affected":"zammad: < 7.1.2","affected_versions_present":true,"cve_id":"CVE-2026-84464","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-84464","fixed":"7.1.2.","last_modified":"2026-09-25T19:03:46.965Z","patch_url":"https://github.com/zammad/zammad/security/advisories/GHSA-jvm2-cr58-4qxp","primary_source":"","published":"2026-09-25T18:18:40.193Z"},{"affected":"zammad: < 7.1.2","affected_versions_present":true,"cve_id":"CVE-2026-63216","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63216","fixed":"7.1.2.","last_modified":"2026-09-29T19:41:42.455Z","patch_url":"https://github.com/zammad/zammad/security/advisories/GHSA-r95m-ghj7-646x","primary_source":"","published":"2026-09-25T18:16:01.483Z"},{"affected":"zammad: < 7.1.2","affected_versions_present":true,"cve_id":"CVE-2026-84458","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-84458","fixed":"7.1.2.","last_modified":"2026-09-25T19:05:02.610Z","patch_url":"https://github.com/zammad/zammad/security/advisories/GHSA-86cc-3ggh-mf2m","primary_source":"","published":"2026-09-25T18:15:26.900Z"},{"affected":"zammad: < 7.1.2","affected_versions_present":true,"cve_id":"CVE-2026-84460","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-84460","fixed":"7.1.2.","last_modified":"2026-09-29T18:09:59.192Z","patch_url":"https://github.com/zammad/zammad/security/advisories/GHSA-6vgm-xxp4-p6jv","primary_source":"","published":"2026-09-25T18:14:49.086Z"},{"affected":"zammad: < 7.1.2","affected_versions_present":true,"cve_id":"CVE-2026-63206","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63206","fixed":"7.1.2.","last_modified":"2026-09-25T19:46:54.438Z","patch_url":"https://github.com/zammad/zammad/security/advisories/GHSA-fpwp-w2p4-hqg7","primary_source":"","published":"2026-09-25T18:14:06.612Z"},{"affected":"zammad: < 7.1.2","affected_versions_present":true,"cve_id":"CVE-2026-63205","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63205","fixed":"7.1.2.","last_modified":"2026-09-29T19:40:34.778Z","patch_url":"https://github.com/zammad/zammad/security/advisories/GHSA-pp8r-x7pp-5qj5","primary_source":"","published":"2026-09-25T18:13:25.176Z"},{"affected":"zammad: < 7.1.2","affected_versions_present":true,"cve_id":"CVE-2026-84462","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-84462","fixed":"7.1.2.","last_modified":"2026-09-25T18:11:30.745Z","patch_url":"https://github.com/zammad/zammad/security/advisories/GHSA-gp3x-9xm8-rcj6","primary_source":"","published":"2026-09-25T17:29:15.837Z"},{"affected":"zammad: < 7.1.2","affected_versions_present":true,"cve_id":"CVE-2026-65828","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-65828","fixed":"7.1.2.","last_modified":"2026-09-25T18:38:58.822Z","patch_url":"https://github.com/zammad/zammad/security/advisories/GHSA-x4f3-367g-m93g","primary_source":"","published":"2026-09-25T17:28:13.159Z"},{"affected":"zammad: = 7.0.2, = 7.1.0","affected_versions_present":true,"cve_id":"CVE-2026-61525","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-61525","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-25T17:31:01.884Z","patch_url":"","primary_source":"","published":"2026-09-25T17:11:33.499Z"},{"affected":"zammad: < 7.0.2","affected_versions_present":true,"cve_id":"CVE-2026-56728","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-56728","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-25T18:38:22.817Z","patch_url":"","primary_source":"","published":"2026-09-25T17:10:16.262Z"},{"affected":"zammad: < 7.0.2","affected_versions_present":true,"cve_id":"CVE-2026-56725","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-56725","fixed":"7.0.2.","last_modified":"2026-09-29T19:37:24.906Z","patch_url":"https://github.com/zammad/zammad/security/advisories/GHSA-45cx-9mrq-mmcj","primary_source":"","published":"2026-09-25T17:09:05.633Z"},{"affected":"zammad: < 7.0.2","affected_versions_present":true,"cve_id":"CVE-2026-56732","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-56732","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-25T17:41:20.304Z","patch_url":"","primary_source":"","published":"2026-09-25T17:08:20.324Z"},{"affected":"zammad: < 7.0.2","affected_versions_present":true,"cve_id":"CVE-2026-56730","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-56730","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-29T19:35:59.021Z","patch_url":"","primary_source":"","published":"2026-09-25T17:07:02.910Z"},{"affected":"zammad: < 7.0.2","affected_versions_present":true,"cve_id":"CVE-2026-56733","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-56733","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-25T18:37:48.132Z","patch_url":"","primary_source":"","published":"2026-09-25T17:05:56.215Z"},{"affected":"zammad: < 7.0.1","affected_versions_present":true,"cve_id":"CVE-2026-56731","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-56731","fixed":"7.0.1.","last_modified":"2026-09-25T19:42:58.050Z","patch_url":"https://github.com/zammad/zammad/security/advisories/GHSA-p9xp-gx8r-4397","primary_source":"","published":"2026-09-25T17:04:50.332Z"},{"affected":"zammad: < 7.0.2","affected_versions_present":true,"cve_id":"CVE-2026-56735","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-56735","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-25T19:06:35.154Z","patch_url":"","primary_source":"","published":"2026-09-25T17:04:03.247Z"},{"affected":"zammad: < 7.0.2","affected_versions_present":true,"cve_id":"CVE-2026-56727","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-56727","fixed":"7.0.2.","last_modified":"2026-09-25T17:42:09.284Z","patch_url":"https://github.com/zammad/zammad/security/advisories/GHSA-56jc-34c8-2xq4","primary_source":"","published":"2026-09-25T17:02:39.020Z"},{"affected":"zammad: < 7.0.2","affected_versions_present":true,"cve_id":"CVE-2026-56734","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-56734","fixed":"7.0.2.","last_modified":"2026-09-29T19:34:59.004Z","patch_url":"https://github.com/zammad/zammad/security/advisories/GHSA-q3cr-3wq3-29hx","primary_source":"","published":"2026-09-25T17:01:46.738Z"},{"affected":"zammad: < 7.0.2","affected_versions_present":true,"cve_id":"CVE-2026-56726","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-56726","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-25T19:44:08.495Z","patch_url":"","primary_source":"","published":"2026-09-25T17:01:00.957Z"},{"affected":"zammad: < 7.0.2","affected_versions_present":true,"cve_id":"CVE-2026-56729","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-56729","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-25T17:09:29.330Z","patch_url":"","primary_source":"","published":"2026-09-25T16:58:05.257Z"},{"affected":"zammad: < 7.0.2","affected_versions_present":true,"cve_id":"CVE-2026-56723","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-56723","fixed":"7.0.2.","last_modified":"2026-09-25T17:44:24.357Z","patch_url":"https://github.com/zammad/zammad/security/advisories/GHSA-374g-4f73-g7m7","primary_source":"","published":"2026-09-25T16:48:34.242Z"},{"affected":"zammad: < 7.0.2","affected_versions_present":true,"cve_id":"CVE-2026-56724","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-56724","fixed":"7.0.2.","last_modified":"2026-09-25T17:45:13.696Z","patch_url":"https://github.com/zammad/zammad/security/advisories/GHSA-pv3q-74g5-w7fv","primary_source":"","published":"2026-09-25T16:46:50.420Z"},{"affected":"\u2264 7.0.1","affected_versions_present":true,"cve_id":"CVE-2026-13229","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-13229","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-07T12:56:21.756Z","patch_url":"","primary_source":"","published":"2026-08-04T18:12:04.163Z"},{"affected":">= 7.0.0, < 7.0.1","affected_versions_present":true,"cve_id":"CVE-2026-34837","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34837","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-08T19:52:03.644Z","patch_url":"","primary_source":"","published":"2026-04-08T18:20:00.977Z"},{"affected":">= 7.0.0, < 7.0.1","affected_versions_present":true,"cve_id":"CVE-2026-34782","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34782","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-09T14:22:06.575Z","patch_url":"","primary_source":"","published":"2026-04-08T18:18:32.044Z"},{"affected":">= 7.0.0, < 7.0.1","affected_versions_present":true,"cve_id":"CVE-2026-34724","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34724","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-09T16:17:29.350Z","patch_url":"","primary_source":"","published":"2026-04-08T18:17:30.178Z"},{"affected":"< 6.5.4; >= 7.0.0-alpha, < 7.0.1","affected_versions_present":true,"cve_id":"CVE-2026-34723","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34723","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-10T20:40:49.909Z","patch_url":"","primary_source":"","published":"2026-04-08T18:14:08.582Z"},{"affected":"< 6.5.4; >= 7.0.0-alpha, < 7.0.1","affected_versions_present":true,"cve_id":"CVE-2026-34722","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34722","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-08T19:51:42.966Z","patch_url":"","primary_source":"","published":"2026-04-08T18:13:20.927Z"},{"affected":"< 6.5.4; >= 7.0.0-alpha, < 7.0.1","affected_versions_present":true,"cve_id":"CVE-2026-34721","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34721","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-09T14:22:33.535Z","patch_url":"","primary_source":"","published":"2026-04-08T18:12:32.504Z"},{"affected":"< 6.5.4; >= 7.0.0-alpha, < 7.0.1","affected_versions_present":true,"cve_id":"CVE-2026-34720","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34720","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-09T16:17:34.878Z","patch_url":"","primary_source":"","published":"2026-04-08T18:11:23.538Z"},{"affected":"< 6.5.4; >= 7.0.0-alpha, < 7.0.1","affected_versions_present":true,"cve_id":"CVE-2026-34719","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34719","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-10T20:38:50.653Z","patch_url":"","primary_source":"","published":"2026-04-08T18:02:16.224Z"},{"affected":"< 6.5.4; >= 7.0.0-alpha, < 7.0.1","affected_versions_present":true,"cve_id":"CVE-2026-34718","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34718","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-08T19:51:19.873Z","patch_url":"","primary_source":"","published":"2026-04-08T18:01:20.870Z"},{"affected":">= 7.0.0, < 7.0.1","affected_versions_present":true,"cve_id":"CVE-2026-34248","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34248","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-09T16:17:40.442Z","patch_url":"","primary_source":"","published":"2026-04-08T18:00:09.868Z"},{"affected":"6.4 < 6.4.2","affected_versions_present":true,"cve_id":"CVE-2025-32360","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-32360","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-04-07T16:12:08.839Z","patch_url":"","primary_source":"","published":"2025-04-05T00:00:00.000Z"},{"affected":"6.4 < 6.4.2","affected_versions_present":true,"cve_id":"CVE-2025-32359","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-32359","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-04-07T16:12:34.420Z","patch_url":"","primary_source":"","published":"2025-04-05T00:00:00.000Z"},{"affected":"6.4 < 6.4.2","affected_versions_present":true,"cve_id":"CVE-2025-32358","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-32358","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-04-07T16:12:55.755Z","patch_url":"","primary_source":"","published":"2025-04-05T00:00:00.000Z"},{"affected":"6.4 < 6.4.2","affected_versions_present":true,"cve_id":"CVE-2025-32357","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-32357","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-04-07T16:13:18.275Z","patch_url":"","primary_source":"","published":"2025-04-05T00:00:00.000Z"},{"affected":"zammad: 6.2.0 < 6.3.0","affected_versions_present":true,"cve_id":"CVE-2024-33668","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-33668","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-16T19:49:40.709Z","patch_url":"","primary_source":"","published":"2024-04-26T00:00:00.000Z"},{"affected":"\u2264 2.3.0 [fixed: 2.3.1; 2.2.2 and 2.1.3]","affected_versions_present":true,"cve_id":"CVE-2019-1010018","cve_url":"https://cve.blacktree.nl/cve/CVE-2019-1010018","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-05T03:07:18.312Z","patch_url":"https://github.com/zammad/zammad/compare/ea50d0c...238784d","primary_source":"","published":"2019-07-16T12:35:14.000Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"Zammad GmbH"}}