Lucene search
+L

6 matches found

NVD
NVD
•added 2026/09/25 4:17 a.m.•22 views

CVE-2026-97735

ITFlow before 26.08 allows SVG attachments in the ticket email parser cron/ticketemailparser.php for email messages that may arrive over SMTP from arbitrary senders...

8CVSS0.00254EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/25 3:45 a.m.•15 views

CVE-2026-97735

ITFlow before 26.08 allows SVG attachments in the ticket email parser cron/ticketemailparser.php for email messages that may arrive over SMTP from arbitrary senders...

8CVSS6AI score0.00254EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/09/25 3:45 a.m.•26 views

CVE-2026-97735

ITFlow before 26.08 allows SVG attachments in the ticket email parser cron/ticketemailparser.php for email messages that may arrive over SMTP from arbitrary senders...

8CVSS5.9AI score
SaveExploits0References5
CVE
CVE
•added 2026/09/25 3:45 a.m.•84 views

CVE-2026-97735

Versions of ITFlow before 26.08 are vulnerable to a flaw in the ticket email parser (cron/ticket_email_parser.php). The software allows SVG attachments in email messages arriving over SMTP from arbitrary senders. This vulnerability could allow an attacker to process malicious SVG files, potential...

8CVSS6AI score0.00254EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/25 3:45 a.m.•47 views

CVE-2026-97735

ITFlow before 26.08 allows SVG attachments in the ticket email parser cron/ticketemailparser.php for email messages that may arrive over SMTP from arbitrary senders...

8CVSS0.00254EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•19 views

CVE-2026-97735: Improper Neutralization of Input During Web Page Generation

ITFlow before 26.08 allows SVG attachments in the ticket email parser cron/ticketemailparser.php for email messages that may arrive over SMTP from arbitrary senders...

8CVSS6AI score0.00254EPSS
SaveExploits0References2
Rows per page
Query Builder