CVE-2026-63206 | Zammad up to 7.1.1 HTML Sanitizer input validation

September 25, 2026 Yanac

A vulnerability marked as problematic has been reported in Zammad up to 7.1.1. This affects an unknown function of the component HTML Sanitizer. This manipulation causes improper input validation.

This vulnerability is tracked as CVE-2026-63206. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More