AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2020-26030

CRITICAL · CVSS 9.8 EPSS 1.33%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-12-28 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2020-26030
Severity
CRITICAL
CVSS
9.8
EPSS
1.33%

Original NVD Description

An issue was discovered in Zammad before 3.4.1. There is an authentication bypass in the SSO endpoint via a crafted header, when SSO is not configured. An attacker can create a valid and authenticated session that can be used to perform any actions in the name of other users.