Two bugs in the open-source helpdesk platform Zammad are now on CISA's list of vulnerabilities under active attack. One can lead to remote code execution on older versions. The other lets a local attacker climb from the zammad service account to root on packaged installs.

Screenshot: Zammad / Wikimedia Commons (AGPL), cropped