Znuny Generic Interface Data Compromise

The vulnerability of the Generic Interface component in the software application for rapid display and access to customer information in Znuny is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and...

CVE-2025-26846

Znuny versions prior to 7.1.4 are vulnerable to a missing authorization issue in the Generic Interface component. The software fails to properly check permissions when updating ticket metadata, which could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of ...