CVE-2026-93484

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-93484
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93484.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-93484
Downstream
Published
2026-10-15T03:50:36Z
Modified
2026-10-16T03:00:34Z
Severity
  • 8.6 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/AU:Y/R:U/RE:M/U:Amber CVSS Calculator
Summary
[none]
Details

Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lack of proper sanitization or the use of parameterized queries allows an attacker to inject arbitrary SQL commands, leading to data theft, modification, or denial of service. Specifically this is in Kernel::System::Ticket::TicketSearch and Kernel::System::Ticket::ArticleSearchIndex::DB via the ContentSearch parameter. The parameter is expected to be either "AND" or "OR", but its value was concatenated directly into the generated SQL query without validation.

Database specific 
{
    "cna_assigner":  "mitre",
    "cwe_ids":  [
        "CWE-89"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93484.json"
}
References

Affected packages

Git / github.com/znuny/znuny

Affected ranges

Type
GIT
Repo
https://github.com/znuny/znuny
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
7c8f705278f9118a4424db5cbc6d4bb3c99134bc
Fixed
29c529b1abd3e3daf89ab4b894bfce3822beef88
Database specific
Show details 
{
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "fixed":  "6.5.25"
        },
        {
            "introduced":  "7.0.0"
        },
        {
            "fixed":  "7.3.7"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

Other
rel-1_0_0-RC1
rel-1_0_0-RC2
rel-1_0_0-RC3
rel-1_0_0_rc1
rel-1_0_0_rc2
rel-1_0_0_rc3
rel-1_1_0-RC1
rel-1_1_0-RC2
rel-1_1_0_rc1
rel-1_1_0_rc2
rel-1_2_0-b1
rel-1_2_0-b2
rel-1_2_0-b3
rel-1_2_0_beta1
rel-1_2_0_beta2
rel-1_2_0_beta3
rel-1_2_1
rel-2_0_0-b1
rel-2_0_0_beta1
rel-2_0_1
rel-2_0_2
rel-2_0_3
rel-2_1_0-b1
rel-2_1_0-b2
rel-2_1_0_beta1
rel-2_1_0_beta2
rel-2_1_1
rel-2_1_2
rel-2_1_3
rel-2_2_0-b1
rel-2_2_0-b2
rel-2_2_0-b3
rel-2_2_0-b4
rel-2_2_0_beta1
rel-2_2_0_beta2
rel-2_2_0_beta3
rel-2_2_0_beta4
rel-2_2_1
rel-2_2_2
rel-2_3_1
rel-2_3_2
rel-2_4_0-b2
rel-2_4_0-b3
rel-2_4_0-b4
rel-2_4_0-b6
rel-2_4_0_beta2
rel-2_4_0_beta3
rel-2_4_0_beta4
rel-2_4_0_beta6
rel-2_4_1
rel-2_4_2
rel-2_4_3
rel-2_4_4
rel-3_0_0-b2
rel-3_0_0-b3
rel-3_0_0-b4
rel-3_0_0-b5
rel-3_0_0-b7
rel-3_0_0_beta2
rel-3_0_0_beta3
rel-3_0_0_beta4
rel-3_0_0_beta5
rel-3_0_0_beta7
rel-3_0_1
rel-3_0_2
rel-3_0_3
rel-3_0_4
rel-3_1_0-b1
rel-3_1_0-b3
rel-3_1_0-b4
rel-3_1_0-b5
rel-3_1_0-rc1
rel-3_1_0_beta1
rel-3_1_0_beta3
rel-3_1_0_beta4
rel-3_1_0_beta5
rel-3_1_0_rc1
rel-3_1_2
rel-3_1_4
rel-3_2_0_beta1
rel-3_2_0_beta2
rel-3_2_0_beta3
rel-3_2_0_beta4
rel-3_2_0_beta5
rel-3_2_0_rc1
rel-3_2_1
rel-3_2_2
rel-3_2_3
rel-3_2_4
rel-3_3_0_beta1
rel-3_3_0_beta2
rel-3_3_0_beta3
rel-3_3_0_beta4
rel-3_3_0_beta5
rel-3_3_0_rc1
rel-3_3_1
rel-4_0_0_beta1
rel-4_0_0_beta2
rel-4_0_0_beta3
rel-4_0_0_beta4
rel-4_0_0_beta5
rel-4_0_0_rc1
rel-5_0_0_alpha1
rel-5_0_0_beta1
rel-5_0_0_beta2
rel-5_0_0_beta3
rel-6_0_0_alpha1
rel-6_0_0_beta1
rel-6_0_0_beta2
rel-6_0_0_beta3
rel-6_0_0_beta4
rel-6_0_0_beta5
rel-6_0_0_rc1
rel-6_0_10
rel-6_0_11
rel-6_0_12
rel-6_0_13
rel-6_0_33
rel-6_0_34
rel-6_0_35
rel-6_0_5
rel-6_0_6
rel-6_0_7
rel-6_0_8
rel-6_0_9
rel-6_1_1
rel-6_4_2
rel-6_4_3
rel-6_4_4
rel-6_5_1
rel-6_5_10
rel-6_5_11
rel-6_5_12
rel-6_5_13
rel-6_5_14
rel-6_5_15
rel-6_5_16
rel-6_5_17
rel-6_5_18
rel-6_5_2
rel-6_5_20
rel-6_5_21
rel-6_5_22
rel-6_5_23
rel-6_5_24
rel-6_5_3
rel-6_5_4
rel-6_5_5
rel-6_5_6
rel-6_5_7
rel-6_5_8
rel-6_5_9
rel-7_0_1
rel-7_0_10
rel-7_0_11
rel-7_0_12
rel-7_0_13
rel-7_0_14
rel-7_0_15
rel-7_0_16
rel-7_0_17
rel-7_0_2
rel-7_0_3
rel-7_0_4
rel-7_0_5
rel-7_0_6
rel-7_0_7
rel-7_0_8
rel-7_0_9
rel-7_1_1
rel-7_1_2
rel-7_1_3
rel-7_1_4
rel-7_1_5
rel-7_1_6
rel-7_1_7
rel-7_2_1
rel-7_2_2
rel-7_3_1
rel-7_3_2
rel-7_3_3
rel-7_3_4
rel-7_3_5
rel-7_3_6

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93484.json"