PULSE
EN
FEED
ransomwhitearmor reclama a KTU Shipyard · PH · Transportationransomsilentransomgroup reclama a Moritt Hock & Hamroff LLP · US · Professional Servicesransomsilentransomgroup reclama a P...ransomqilin reclama a TRAUCO AG · DE · Manufacturingransomqilin reclama a Honghwa International · TW · Manufacturingransomwallstreet reclama a Suburban Orthopaedics · US · Healthcareransomsilentransomgroup reclama a M... H...ransomrhysida reclama a Cipsa Industrias Sa De Cv · MX · Manufacturingransomqilin reclama a Richland Resources Corporation · US · Energy & Utilitiesransomsilentransomgroup reclama a A... F...ransomqilin reclama a Sistemas Visuales 360 · MX · Technologyransomqilin reclama a Societe Ivoirienne De Telediffusion · CI · Technologyransomqilin reclama a Palletline · GB · Transportationransomaurora reclama a Rapid Manufacturing · Manufacturingransomwhitearmor reclama a KTU Shipyard · PH · Transportationransomsilentransomgroup reclama a Moritt Hock & Hamroff LLP · US · Professional Servicesransomsilentransomgroup reclama a P...ransomqilin reclama a TRAUCO AG · DE · Manufacturingransomqilin reclama a Honghwa International · TW · Manufacturingransomwallstreet reclama a Suburban Orthopaedics · US · Healthcareransomsilentransomgroup reclama a M... H...ransomrhysida reclama a Cipsa Industrias Sa De Cv · MX · Manufacturingransomqilin reclama a Richland Resources Corporation · US · Energy & Utilitiesransomsilentransomgroup reclama a A... F...ransomqilin reclama a Sistemas Visuales 360 · MX · Technologyransomqilin reclama a Societe Ivoirienne De Telediffusion · CI · Technologyransomqilin reclama a Palletline · GB · Transportationransomaurora reclama a Rapid Manufacturing · Manufacturing
← Todos los CVEs
CVE Watch24 jul 2026

CVE-2026-34718

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the HTML sanitizer for ticket articles was mis

CVSS

6.1

Medio

EPSS

0.1%

p4

KEV

—

Exploit Today

1

0-100

Publicado: 8 abr 2026 · Última mod.: 24 jul 2026 · CWE-80

EPSS · 30d
0.1%EPSS · 30 días0.3%
2026-10-022026-10-29
Descripción técnica

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the HTML sanitizer for ticket articles was missing proper sanitization of data: ... URI schemes, resulting in storing such malicious content in the database of the Zammad instance. The Zammad GUI is rendering this content, due to applied CSP rules no harm was done by e.g., clicking such a link. This vulnerability is fixed in 7.0.1 and 6.5.4.

Referencias oficiales
CVEs relacionados
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-620575.3 MED
—
———Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Fahim Reza Divi Contact Form 7 cf7-styler-for-divi allows Code Injection.This issue affects Divi Contact Form 7: from n/a through 4.1.0.7hCVE-2026-527105.3 MED
—
———Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ithemelandco GIFTiT – Free Gifts for WooCommerce ithemeland-free-gifts-for-woo allows Code Injection.This issue affects GIFTiT – Free Gifts for WooCommerce: from n/a through 4.5.7hCVE-2026-1194795.3 MED
—
———Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Code Injection.This issue affects JetFormBuilder: from n/a through 3.6.7.1.8hCVE-2026-426944.3 MED
—
——0Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Themeum Kirki kirki allows Code Injection.This issue affects Kirki: from n/a through 6.4.0.7hCVE-2026-482025.3 MED
—
——0Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brave Brave brave-popup-builder allows Code Injection.This issue affects Brave: from n/a through 0.8.8.1dCVE-2026-254675.3 MED
—
——0Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ThemeGrill User Registration user-registration allows Code Injection.This issue affects User Registration: from n/a through 5.3.0.1d