CVE-2026-93484 | Znuny up to 6.5.24/7.3.6 Ticket Search TicketSearch ContentSearch sql injection

October 15, 2026 Yanac

A vulnerability was found in Znuny up to 6.5.24/7.3.6 and classified as critical. This affects the function Kernel::System::Ticket::TicketSearch of the component Ticket Search. Executing a manipulation of the argument ContentSearch can lead to sql injection.

This vulnerability is handled as CVE-2026-93484. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More