Server-Side Request Forgery

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. An SSRF issue was discovered in Zammad before 3.4.1. The SMS configuration interface for Massenversand is implemented in a way that renders the result of a test request to the Use…CVE-2020-26032Zammad · 1.1% likely

   CWE-918

2. An issue was discovered in Zammad before 4.1.1. SSRF can occur via GitHub or GitLab integration.CVE-2021-42091Zammad · 1.1% likely

   CWE-918

3. Zammad: Avatar Image URL Server-Side Request ForwardingCVE-2026-56734zammad · CVSS 5.3 · 0.4% likely

   CWE-918

4. In Zammad 6.4.x before 6.4.2, SSRF can occur. Authenticated admin users can enable webhooks in Zammad, which are triggered as POST requests when certain conditions are met. If a w…CVE-2025-32358Zammad · CVSS 4 · 0.3% likely

   CWE-918

5. Zammad has a Server-side request forgery (SSRF) via webhooksCVE-2026-34719zammad · CVSS 4.3 · 0.3% likely

   CWE-918

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.