CVE-2026-56731

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, a low-privilege authenticated user may inject arbitrary HTML markup, including JavaScript event handlers, into a ticket title via the standard ticket creation workflow. The title is persisted without sanitization. This issue is fixed in version 7.0.1.

• CWE-79

• https://github.com/zammad/zammad/commit/16a4a2e1be6642ec0c3ba3a76e358ad065f48f78
• https://github.com/zammad/zammad/security/advisories/GHSA-p9xp-gx8r-4397

Published

Sep 25, 2026

Last Modified

Sep 25, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-56726Zammad is a web based open source helpdesk/customer support …5.1
• CVE-2026-56727Zammad is a web based open source helpdesk/customer support …7.1
• CVE-2026-56728Zammad is a web based open source helpdesk/customer support …5.3
• CVE-2026-56729Zammad is a web based open source helpdesk/customer support …2.1
• CVE-2026-5673A flaw was found in libtheora. This heap-based out-of-bounds…7.1
• CVE-2026-56730Zammad is a web based open source helpdesk/customer support …2.1
• CVE-2026-56732Zammad is a web based open source helpdesk/customer support …5.3
• CVE-2026-56733Zammad is a web based open source helpdesk/customer support …8.7
• CVE-2026-56734Zammad is a web based open source helpdesk/customer support …5.3
• CVE-2026-56735Zammad is a web based open source helpdesk/customer support …5.3
• CVE-2026-56736phpMyFAQ is an open source FAQ web application. A stored cro…8.2
• CVE-2026-56737phpMyFAQ is an open source FAQ web application. Versions 3.2…8.1