CVE-2026-93483 | Znuny up to 6.5.24/7.3.6 HTTPBasicAuth HTTP_REMOTE_USER improper authentication

October 15, 2026 Yanac

A vulnerability has been found in Znuny up to 6.5.24/7.3.6 and classified as critical. Affected by this issue is the function Kernel::System::Auth::HTTPBasicAuth/Kernel::System::CustomerAuth::HTTPBasicAuth of the component HTTPBasicAuth. Performing a manipulation of the argument HTTP_REMOTE_USER results in improper authentication.

This vulnerability is known as CVE-2026-93483. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More