Reflected XSS Vulnerability in Znuny Communication Log Administration View
CVE-2026-50592

6.4MEDIUM

Key Information:

Vendor

Znuny

Status
Znuny
Vendor
CVE Published:
5 June 2026

What is CVE-2026-50592?

The vulnerability allows attackers to exploit reflected cross-site scripting (XSS) in the AdminCommunicationLog, manifesting in the communication log administration view of Znuny LTS and Znuny. This flaw could enable unauthorized script execution in the context of the user's session, potentially leading to data interception or manipulation. Users and administrators should ensure they update to the latest versions to mitigate these risks.

Affected Version(s)

Znuny 0 < 6.5.21

Znuny 7.0.0 < 7.3.3

References

https://www.znuny.org/en/advisories/zsa-2026-10

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.