CVE-2026-56734 | Zammad up to 7.0.1 Federated Authentication server-side request forgery

September 25, 2026 Yanac

A vulnerability marked as critical has been reported in Zammad up to 7.0.1. Impacted is an unknown function of the component Federated Authentication. The manipulation leads to server-side request forgery.

This vulnerability is listed as CVE-2026-56734. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More