The vulnerability of the Generic Interface component in the software for rapid display and access to information about clients in Znuny allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Generic Interface component in the software application for rapid display and access to customer information in Znuny is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and...

CVE-2025-26846

The Znuny work order system (versions prior to 7.1.4 ) is vulnerable to a security flaw due to insufficient permission checking within the Generic Interface . Specifically, the software fails to properly validate permissions when using this interface to update ticket metadata. An attacker exploit...