CVE-2026-65828

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, the legacy destroy_form action on AttachmentsController deletes UploadCache Store records based solely on a user-supplied form_id without verifying that the requesting user owns those records. An authenticated attacker who learns another user's pending-upload UUID can silently remove temporary file uploads before the victim submits their ticket or article. This issue is fixed in version 7.1.2.

• CWE-862

• https://github.com/zammad/zammad/commit/3b755736fdbee8ff6ddf53661d6912d3d3028325
• https://github.com/zammad/zammad/security/advisories/GHSA-x4f3-367g-m93g

Published

Sep 25, 2026

Last Modified

Sep 25, 2026

Status

Received

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-65816Use of incorrectly-resolved name or reference in Azure Arc a…10
• CVE-2026-65818Server-side request forgery (ssrf) in Power Automate allows …9.9
• CVE-2026-65819gopacket provides packet processing capabilities for Go. Thr…7.5
• CVE-2026-6582A flaw has been found in TransformerOptimus SuperAGI up to 0…7.3
• CVE-2026-65822ERPNext is a free and open source Enterprise Resource Planni…7.6
• CVE-2026-65827Docmost is open-source collaborative wiki and documentation …6.5
• CVE-2026-65829MPXJ is an open source library to read and write project pla…5.3
• CVE-2026-6583A vulnerability has been found in TransformerOptimus SuperAG…5.4
• CVE-2026-65831ArcadeDB is a Multi-Model DBMS. Prior to 26.7.1, a reader-ro…7.7
• CVE-2026-65832Deskflow is a keyboard and mouse sharing app. Prior to conti…8.2
• CVE-2026-65834Capsule is a multi-tenancy and policy-based framework for Ku…6.8
• CVE-2026-65835Capsule is a multi-tenancy and policy-based framework for Ku…6.6