Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Znuny 6.5.25, 7.3.7 Clear all filters
TI-2026-74585 CVE-2026-93484 · GHSA-mxcg-m44c-38cw

SQL injection in Znuny ticket search via ContentSearch parameter

Priority LOW 39

Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.003 Published 2026-10-15 Fixed in 6.5.25, 7.3.7 CWE-89
TI-2026-74584 CVE-2026-93483 · GHSA-g4fx-r8m5-c6r7

Authentication bypass in Znuny via forged Remote-User header

Priority MEDIUM 42

In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific HTTP request header.

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.00234 Published 2026-10-15 Fixed in 6.5.25, 7.3.7 CWE-348