Kayako

Kayako maintains a customer-support platform spanning products such as eSupport, SupportSuite, and Kayako Fusion that are deployed across service organizations for ticketing, knowledge management, and chat functionality. Despite a narrow product portfolio, the vendor's disclosures are more prominent than most in the landscape and frequently acquire public exploit code, reflecting the appeal of customer-service platforms as targets for credential theft, data exfiltration, and operational disruption. The recurring vulnerability patterns center on web-application and data-handling weaknesses: cross-site scripting, SQL injection, sensitive information exposure, and resource-consumption flaws that are endemic to multi-tenant web services handling customer interactions. Defenders should treat Kayako deployments as high-value targets for patching, prioritize internet-exposed instances, and monitor for post-authentication abuse vectors given the sensitive customer data these platforms typically store. Current severity, exploitation activity, and exposure counts are shown alongside this summary.