Znuny Vulnerabilities - Remote Attack Possible

This advisory from CERT-Bund (WID-SEC-2026-0876) highlights multiple critical vulnerabilities in Znuny, an open-source ticketing software. The vulnerabilities, with a CVSS base score of 7.5, allow for remote attacks, including information disclosure, data manipulation, cross-site scripting (XSS), and security bypass. Affected versions include Znuny <7.3.1 and Znuny LTS <6.5.19.

Organizations using affected versions of Znuny must apply available mitigations immediately to prevent exploitation. This includes updating to a patched version or implementing specific security measures as recommended by the vendor. Failure to address these vulnerabilities could lead to significant data breaches, system compromise, and operational disruption.