CVE-2026-84462: Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, a security filter that protects Zamm

Zammad, a web-based customer support system, has a vulnerability in versions before 7.1.2 where a security filter protecting AI Agent configuration can be bypassed using specially crafted text. An administrator could exploit this to run arbitrary commands (code that executes whatever the attacker wants) on the server, potentially compromising all stored data.