EUVD-2026-63586
GHSA-4mvf-wmjf-gpfv
Severity by source
AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
PR:H reflects mandatory agent authentication; S:C captures cross-session script execution; C:L/I:L bounded by browser-session impact only with no availability effect.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Lifecycle Timeline
2DescriptionCVE.org
Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS.
AnalysisAI
Cross-site scripting in Znuny's AgentTicketEmailResend template allows a high-privileged authenticated attacker to inject malicious script that executes within other agents' browser sessions, enabling session hijacking or unauthorized agent-level actions. All Znuny LTS versions prior to 6.5.22 are affected per CPE cpe:2.3:a:znuny:znuny:*:*:*:*:*:*:*:* and the vendor advisory at znuny.org/en/advisories/zsa-2026-12. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an existing authenticated Znuny agent or administrator account with privileges sufficient to use the AgentTicketEmailResend feature (PR:H per CVSS). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS base score of 4.8 (Medium) with vector AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N reflects a vulnerability whose real-world exploitability is substantially gated by two sequential conditions: the attacker must possess or compromise a high-privileged agent account, and a separate victim agent must interact with the poisoned template. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An authenticated Znuny agent with sufficient privileges crafts a ticket email resend request embedding an XSS payload within a vulnerable template field, such as an email subject or custom header. When a second agent opens or previews the affected AgentTicketEmailResend context, the injected script executes silently in their browser, enabling the attacker to exfiltrate the victim's session cookie or perform ticket operations under the victim's identity. … |
| Remediation | Upgrade to Znuny LTS 6.5.22 or later, which resolves the AgentTicketEmailResend template XSS per the vendor advisory at https://www.znuny.org/en/advisories/zsa-2026-12. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
An Eval Injection issue was discovered in Znuny through 7.1.3. Rated critical severity (CVSS 9.8), this vulnerability is
An issue was discovered in Znuny before 7.1.4. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploi
An issue was discovered in Znuny through 7.1.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely explo
An issue was discovered in Znuny and Znuny LTS 6.0.31 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a logged-in use
An issue was discovered in Znuny LTS 6.5.1 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a logged-in agent is able
An issue was discovered in Znuny before 7.1.5. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitabl
An issue was discovered in Znuny through 7.1.3. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitab
Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows DoS/ReDos via email. Rated high severity (CVSS 7.5
An issue was discovered in Znuny 7.0.1 through 7.0.16 where the ticket detail view in the customer front allows the exec
Reflected cross-site scripting in Znuny's AdminCommunicationLog (communication log administration view) allows a low-pri
An issue was discovered in Znuny through 6.5.14 and 7.x through 7.1.6. Rated medium severity (CVSS 6.1), this vulnerabil
Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. Rated medium severity (CVSS 6.1), this vulner
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today