Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-93484

Quick assessment

Affected
Znuny Znuny
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Znuny 在 7.3.6 及更早版本中，通过将用户提供的输入直接拼接到 SQL 语句来构建工单搜索数据库查询。由于缺乏适当的输入净化或未使用参数化查询，攻击者可以注入任意 SQL 命令，从而导致数据泄露、数据篡改或服务拒绝。具体而言，该漏洞存在于 和 模块中，通过 参数触发。该参数的预期值应为 "AND" 或 "OR"，但其值未经过任何验证就被直接拼接到了生成的 SQL 查询中。

CVSS 8.6 · High EPSS 0.30% · P21

Affected Version Matrix 2

VendorProduct Version RangeStatus
Znuny Znuny < 6.5.25 affected
7.0.0< 7.3.7 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-93484

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lack of proper sanitization or the use of parameterized queries allows an attacker to inject arbitrary SQL commands, leading to data theft, modification, or denial of service. Specifically this is in Kernel::System::Ticket::TicketSearch and Kernel::System::Ticket::ArticleSearchIndex::DB via the ContentSearch parameter. The parameter is expected to be either "AND" or "OR", but its value was concatenated directly into the generated SQL query without validation.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/AU:Y/R:U/RE:M/U:Amber
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Znuny Znuny 0 ~ 6.5.25 -

II. Public POCs for CVE-2026-93484

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-93484

请登录查看更多情报信息。

Other References for CVE-2026-93484 (2)

IV. Related Vulnerabilities

Same product: Znuny
Same vendor: Znuny
Same weakness: CWE-89

V. Comments for CVE-2026-93484

No comments yet

Leave a comment