CVE-2026-50592: XSS
In Znuny LTS before 6.5.21 and Znuny before 7.3.3, there is reflected XSS in
AdminCommunicationLog (aka the communication log administration view).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Znuny LTSto a version that resolves this vulnerability.Fixed in 6.5.21 - Upgrade
Upgrade
Znunyto a version that resolves this vulnerability.Fixed in 7.3.3
Event History
Frequently Asked Questions
What is the severity of CVE-2026-50592?
The severity of CVE-2026-50592 is classified as medium with a score of 6.4.
How do I fix CVE-2026-50592?
To fix CVE-2026-50592, upgrade to Znuny LTS version 6.5.21 or Znuny version 7.3.3 or later.
What type of vulnerability is CVE-2026-50592?
CVE-2026-50592 is a reflected Cross-Site Scripting (XSS) vulnerability.
Which software versions are affected by CVE-2026-50592?
CVE-2026-50592 affects Znuny LTS versions prior to 6.5.21 and Znuny versions before 7.3.3.
What component is vulnerable in CVE-2026-50592?
The vulnerability in CVE-2026-50592 exists in the AdminCommunicationLog, specifically in the communication log administration view.