CVE-2025-26847: Critical severity znuny vulnerability
Published May 8, 2025
·Updated
An issue was discovered in Znuny before 7.1.5. When generating a support bundle, not all passwords are masked.
Affected Software
4 affected components
Znuny Znuny<7.1.5
Znuny Znuny>=6.0.31<=6.0.48
Znuny Znuny>=6.5.1<=6.5.14
Znuny Znuny>=7.0.1<=7.1.6
Event History
May 8, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-26847?
CVE-2025-26847 has a moderate severity level as it exposes sensitive information during the support bundle generation.
2
How do I fix CVE-2025-26847?
To fix CVE-2025-26847, upgrade to Znuny version 7.1.5 or later where passwords are properly masked in support bundles.
3
What versions of Znuny are affected by CVE-2025-26847?
Znuny versions prior to 7.1.5 are affected by CVE-2025-26847.
4
Can CVE-2025-26847 lead to data breaches?
Yes, CVE-2025-26847 can potentially lead to data breaches as it allows the exposure of unmasked passwords.
5
Who can be affected by CVE-2025-26847?
Any user or organization using affected Znuny versions prior to 7.1.5 may be impacted by CVE-2025-26847.