Lucene search
+L

6 matches found

NVD
NVD
•added 2026/09/25 4:17 a.m.•19 views

CVE-2026-97735

ITFlow before 26.08 allows SVG attachments in the ticket email parser cron/ticketemailparser.php for email messages that may arrive over SMTP from arbitrary senders...

8CVSS0.00254EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/25 3:45 a.m.•13 views

CVE-2026-97735

ITFlow before 26.08 allows SVG attachments in the ticket email parser cron/ticketemailparser.php for email messages that may arrive over SMTP from arbitrary senders...

8CVSS6AI score0.00254EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/25 3:45 a.m.•44 views

CVE-2026-97735

ITFlow before 26.08 allows SVG attachments in the ticket email parser cron/ticketemailparser.php for email messages that may arrive over SMTP from arbitrary senders...

8CVSS0.00254EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/25 3:45 a.m.•71 views

CVE-2026-97735

Versions of ITFlow before 26.08 are vulnerable to a flaw in the ticket email parser (cron/ticket_email_parser.php). The software allows SVG attachments in email messages arriving over SMTP from arbitrary senders. This vulnerability could allow an attacker to process malicious SVG files, potential...

8CVSS6AI score0.00254EPSS
SaveExploits0References2
osv-cve
osv-cve
•added 2026/09/25 3:45 a.m.•18 views

CVE-2026-97735

ITFlow before 26.08 allows SVG attachments in the ticket email parser cron/ticketemailparser.php for email messages that may arrive over SMTP from arbitrary senders...

8CVSS5.9AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•13 views

CVE-2026-97735: Improper Neutralization of Input During Web Page Generation

ITFlow before 26.08 allows SVG attachments in the ticket email parser cron/ticketemailparser.php for email messages that may arrive over SMTP from arbitrary senders...

8CVSS6AI score0.00254EPSS
SaveExploits0References2
Rows per page
Query Builder