CVE Catalog
CVE-2026-77506
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk0.25%
17th percentile - higher than 17% of all known CVEs
Summary
Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS.
Risk Assessment
An attacker could inject malicious scripts, leading to session theft, account takeover, or malware distribution.
Recommendation
Upgrade Znuny to LTS 6.5.22 or later to fix this vulnerability.
Other vulnerabilities in Znuny
See allOriginal NVD description (English source)
Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS.