CVE-2025-26846: Critical severity znuny vulnerability
Published May 12, 2025
·Updated
An issue was discovered in Znuny before 7.1.4. Permissions are not checked properly when using the Generic Interface to update ticket metadata.
Affected Software
4 affected components
Znuny Znuny<7.1.4
Znuny Znuny>=6.0.0<=6.0.48
Znuny Znuny>=6.5.1<=6.5.11
Znuny Znuny>=7.0.1<=7.1.3
Event History
May 12, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2025-26846?
CVE-2025-26846 has been categorized as a high severity vulnerability due to improper permission checks.
2
How do I fix CVE-2025-26846?
To fix CVE-2025-26846, upgrade Znuny to version 7.1.4 or later where the issue has been resolved.
3
What impact does CVE-2025-26846 have on system security?
CVE-2025-26846 could allow unauthorized users to update ticket metadata, compromising the integrity of the ticketing system.
4
Is CVE-2025-26846 present in earlier versions of Znuny?
Yes, CVE-2025-26846 affects all versions of Znuny prior to 7.1.4.
5
Who is affected by CVE-2025-26846?
Any organization using Znuny versions earlier than 7.1.4 is affected by CVE-2025-26846.