CVE-2025-26842: High severity znuny vulnerability
Published May 8, 2025
·Updated
An issue was discovered in Znuny through 7.1.3. If access to a ticket is not given, the content of S/MIME encrypted e-mail messages is visible to users with access to the CommunicationLog.
Affected Software
2 affected components
Znuny Znuny<=7.1.3
Znuny Znuny<=7.1.3
Event History
May 8, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-26842?
CVE-2025-26842 is classified as a medium severity vulnerability due to potential data exposure.
2
How do I fix CVE-2025-26842?
To fix CVE-2025-26842, upgrade to the latest version of Znuny that addresses this vulnerability.
3
What impact does CVE-2025-26842 have on Znuny users?
CVE-2025-26842 allows unauthorized users to view S/MIME encrypted email content through the CommunicationLog.
4
Which versions of Znuny are affected by CVE-2025-26842?
CVE-2025-26842 affects all versions of Znuny up to and including 7.1.3.
5
How can I check if my Znuny instance is vulnerable to CVE-2025-26842?
Check the version of your Znuny installation; if it is version 7.1.3 or earlier, it is vulnerable to CVE-2025-26842.