Rce on cti.alhttps://cti.al/tags/rce/Recent content in Rce on cti.alHugoen-usWed, 03 Jun 2026 12:00:00 +0200Server-Side Template Injection to RCE in Zammad's AI Agent (CVE-2026-34724)https://cti.al/posts/zammad-ssti-rce-ai-agent-cve-2026-34724/Wed, 03 Jun 2026 12:00:00 +0200https://cti.al/posts/zammad-ssti-rce-ai-agent-cve-2026-34724/A new AI Agent feature in Zammad 7.0 splices admin-controlled enrichment values straight into an ERB template rendered with trusted: true — reaching a code-execution sink that dates back to a 2021 CVE.