CVE-2025-52204

CVE-2025-52204 – Znuny customer.pl 端点中的反射型XSS/HTML注入 摘要 Znuny 存在反射型跨站脚本（XSS）和 HTML 注入漏洞，攻击者可通过系统配置 CustomerPanelSessionName 定义的参数在 customer.pl 端点注入任意 JavaScript 或 HTML。 分类 CVE: CVE-2025-52204 CWE: CWE-79 – 网页生成过程中输入的不当中和（'跨站脚本'） CVSS v3.1（研究人员评估）： 6.1 中等 CVSS Vector:...

Linux Distros Unpatched Vulnerability : CVE-2026-77506

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS. CVE-2026-77506 Note that Nessus relies on the presence of the package as reported by the...

CVE-2026-77506

Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS...

DEBIAN-CVE-2026-77506

Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS...

EUVD-2026-63586

Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS...

CVE-2026-77506

Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS...

CVE-2026-77506

Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS...

CVE-2026-77506

Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS...

CVE-2026-77506

Znuny before LTS 6.5.22 is affected by a template XSS vulnerability in the AgentTicketEmailResend component. An attacker with high privileges and requiring user interaction can inject malicious content through the template, leading to low-impact cross-origin confidentiality and integrity compromi...

PT-2026-79119

Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS...

The vulnerability of the S/MIME protocol implementation in software for rapid display and access to information about clients of Znuny allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the S/MIME protocol implementation in software for quick display and access to information about clients in Znuny is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized acce...

The vulnerability of the Generic Interface component in the software for rapid display and access to information about clients in Znuny allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Generic Interface component in the software application for rapid display and access to customer information in Znuny is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and...

CVE-2026-50592

In Znuny LTS before 6.5.21 and Znuny before 7.3.3, there is reflected XSS in AdminCommunicationLog aka the communication log administration view...

CVE-2026-50591

In Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences...

CVE-2026-50591

In Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences...

DEBIAN-CVE-2026-50591

In Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences...

DEBIAN-CVE-2026-50592

In Znuny LTS before 6.5.21 and Znuny before 7.3.3, there is reflected XSS in AdminCommunicationLog aka the communication log administration view...

CVE-2026-50592

In Znuny LTS before 6.5.21 and Znuny before 7.3.3, there is reflected XSS in AdminCommunicationLog aka the communication log administration view...

CVE-2026-50592

In Znuny LTS before 6.5.21 and Znuny before 7.3.3, there is reflected XSS in AdminCommunicationLog aka the communication log administration view...

CVE-2026-50592

The CVE CVE-2026-50592 affects Znuny LTS prior to 6.5.21 and Znuny prior to 7.3.3, with a reflected XSS in AdminCommunicationLog (the communication log administration view). The underlying issue is a reflected cross-site scripting vulnerability that could impact users when viewing the admin commu...