TI-2025-19719 CVE-2025-26846 · GHSA-m53m-r8mm-799v
An issue was discovered in Znuny before 7.1.4.
Priority MEDIUM 49
An issue was discovered in Znuny before 7.1.4.
Znuny
Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
Znuny records in CISA KEVNo Znuny vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
11 records in Znuny · all components
TI-2025-19718 CVE-2025-26845 · GHSA-8hx2-3q2m-9xxf
An Eval Injection issue was discovered in Znuny through 7.1.3.
Priority MEDIUM 49
An Eval Injection issue was discovered in Znuny through 7.1.3.
TI-2025-19717 CVE-2025-26844 · GHSA-qjp8-wwq5-32hp
An issue was discovered in Znuny through 7.1.3.
Priority MEDIUM 49
An issue was discovered in Znuny through 7.1.3.
TI-2025-19720 CVE-2025-26847 · GHSA-crjm-f8jp-7pww
An issue was discovered in Znuny before 7.1.5.
Priority MEDIUM 45
An issue was discovered in Znuny before 7.1.5.
TI-2024-21383 CVE-2024-32491 · GHSA-fg45-47x2-7rw4
An issue was discovered in Znuny and Znuny LTS 6.0.31 through 6.5.7 and Znuny 7.0.1…
Priority MEDIUM 44
An issue was discovered in Znuny and Znuny LTS 6.0.31 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a logged-in user can upload a file (via a manipulated AJAX Request) to an arbitrary writable location by traversing…
TI-2025-19716 CVE-2025-26842 · GHSA-c2x5-mpj8-v9v9
An issue was discovered in Znuny through 7.1.3.
Priority LOW 39
An issue was discovered in Znuny through 7.1.3.
TI-2024-21385 CVE-2024-32493 · GHSA-j46p-v4gj-3jj5
An issue was discovered in Znuny LTS 6.5.1 through 6.5.7 and Znuny 7.0.1 through 7.0.16…
Priority LOW 39
An issue was discovered in Znuny LTS 6.5.1 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a logged-in agent is able to inject SQL in the draft form ID parameter of an AJAX request.
TI-2024-32631 CVE-2024-48938 · GHSA-pjf2-268r-g6x9
Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows DoS/ReDos via email.
Priority LOW 34
Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows DoS/ReDos via email.
TI-2024-21384 CVE-2024-32492 · GHSA-c75w-9qpm-w8gc
An issue was discovered in Znuny 7.0.1 through 7.0.16 where the ticket detail view in the…
Priority LOW 34
An issue was discovered in Znuny 7.0.1 through 7.0.16 where the ticket detail view in the customer front allows the execution of external JavaScript.
TI-2025-28493 CVE-2025-43926 · GHSA-6mp7-r3w8-3vrm
An issue was discovered in Znuny through 6.5.14 and 7.x through 7.1.6.
Priority LOW 27
An issue was discovered in Znuny through 6.5.14 and 7.x through 7.1.6.
TI-2024-32630 CVE-2024-48937 · GHSA-q6x3-2mmr-2q9c
Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS.
Priority LOW 27
Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS.