Vulnerabilities in Znuny
5 resultsCVE-2026-93484HIGHZnuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lacEPSS 0.3%CVE-2026-77506MEDIUMZnuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS.EPSS 0.2%CVE-2026-93483CRITICALIn Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functionsEPSS 0.2%CVE-2026-50592MEDIUMIn Znuny LTS before 6.5.21 and Znuny before 7.3.3, there is reflected XSS in
AdminCommunicationLog (aka the communication log administratiEPSS 0.1%CVE-2026-50591MEDIUMIn Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences.EPSS 0.1%