Log in Start free

Znuny

Products

ProductCVEsExploitedLatest
Znuny5–Oct 15, 2026

Exploited and recent CVEs

  • CVE-2026-93484 High 8.6 Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lack of proper sanitization or the use of parameterized queries 0.3%
  • CVE-2026-93483 Critical 9.5 In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific HTTP request header. Because the 0.2%
  • CVE-2026-77506 Medium 4.8 Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS. 0.2%
  • CVE-2026-50592 Medium 6.4 In Znuny LTS before 6.5.21 and Znuny before 7.3.3, there is reflected XSS in AdminCommunicationLog (aka the communication log administration view). 0.1%
  • CVE-2026-50591 Medium 5.4 In Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences. 0.1%