Znuny vulnerabilities
We track 7 vulnerabilities in Znuny products across 2 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on October 15, 2026.
Latest Znuny vulnerabilities
- 8.6 High severity
Znuny: Improper Neutralization of Special Elements used in an SQL Command
Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lack of proper sanitization or the use of parameterized queries allows an attacker to inject arbitrary SQL commands, leadin
- 9.5 Critical severity
Znuny: Use of Less Trusted Source
In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific HTTP request header. Because the application incorrectly trusts this header, an attacker can
- 9.8 Critical severity
Znuny: Improper Control of Generation of Code
An Eval Injection issue was discovered in Znuny through 7.1.3. A user with write access to the configuration file can use this to execute a command executed by the user running the backup.pl script.
- 7.5 High severity
Znuny: Incorrect Authorization
An issue was discovered in Znuny through 7.1.3. If access to a ticket is not given, the content of S/MIME encrypted e-mail messages is visible to users with access to the CommunicationLog.
- 7.5 High severity
Znuny: Inefficient Regular Expression Complexity
Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows DoS/ReDos via email. Parsing the content of emails where HTML code is copied from Microsoft Word could lead to high CPU usage and block the parsing process.
- 8.8 High severity
lts: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in Znuny LTS 6.5.1 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a logged-in agent is able to inject SQL in the draft form ID parameter of an AJAX request.
- 9.8 Critical severity
znuny: Improper Control of Generation of Code
An issue was discovered in Znuny and Znuny LTS 6.0.31 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a logged-in user can upload a file (via a manipulated AJAX Request) to an arbitrary writable location by traversing paths. Arbitrary code can be executed i