CVE-2025-26845: Code Injection
An Eval Injection issue was discovered in Znuny through 7.1.3. A user with write access to the configuration file can use this to execute a command executed by the user running the backup.pl script.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-26845?
CVE-2025-26845 is classified as a critical vulnerability due to its potential to allow unauthorized command execution.
How do I fix CVE-2025-26845?
To fix CVE-2025-26845, ensure that only trusted users have write access to the configuration file and update Znuny to a version beyond 7.1.3.
Who is affected by CVE-2025-26845?
CVE-2025-26845 affects all users of Znuny versions up to and including 7.1.3 who have write access to the configuration file.
What is the main issue with CVE-2025-26845?
The main issue with CVE-2025-26845 is the Eval Injection vulnerability that allows execution of arbitrary commands through the backup.pl script.
Can CVE-2025-26845 lead to a data breach?
Yes, CVE-2025-26845 can lead to a data breach if an attacker exploits the Eval Injection to execute malicious commands.