CVE-2025-26847

Mô tả

Tham khảo

• znuny.com · Product
• znuny.org/en/advisories/zsa-2025-06 · Vendor Advisory

Lỗ hổng khác của znuny

• CVE-2025-26846NGHIÊM TRỌNG 9.8An issue was discovered in Znuny before 7.1.4. Permissions are not checked properly when using the Generic Interface to update ticket metada…
• CVE-2025-26845NGHIÊM TRỌNG 9.8An Eval Injection issue was discovered in Znuny through 7.1.3. A user with write access to the configuration file can use this to execute a …
• CVE-2025-43926TRUNG BÌNH 6.1An issue was discovered in Znuny through 6.5.14 and 7.x through 7.1.6. Custom AJAX calls to the AgentPreferences UpdateAJAX subaction can be…
• CVE-2025-26844NGHIÊM TRỌNG 9.8An issue was discovered in Znuny through 7.1.3. A cookie is set without the HttpOnly flag.
• CVE-2025-26842CAO 7.5An issue was discovered in Znuny through 7.1.3. If access to a ticket is not given, the content of S/MIME encrypted e-mail messages is visib…