CVE-2026-93484

Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lack of proper sanitization or the use of parameterized queries allows an attacker to inject arbitrary SQL commands, leading to data theft, modification, or denial of service. Specifically this is in Kernel::System::Ticket::TicketSearch and Kernel::System::Ticket::ArticleSearchIndex::DB via the ContentSearch parameter. The parameter is expected to be either "AND" or "OR", but its value was concatenated directly into the generated SQL query without validation.

• CWE-89

• https://www.znuny.org/advisories
• https://www.znuny.org/en/advisories/zsa-2026-15

Published

Oct 15, 2026

Last Modified

Oct 15, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-93474Charging station authentication identifiers are publicly acc…6.5
• CVE-2026-93475The X.509 parser in NetX Secure accepts an RSA public key of…9.3
• CVE-2026-93477Improperly Controlled Modification of Dynamically-Determined…5.9
• CVE-2026-93479A vulnerability exists in NGINX Plus and NGINX Open Source w…8.1
• CVE-2026-9348A vulnerability was found in Edimax EW-7438RPn up to 1.31. A…8.8
• CVE-2026-93483In Znuny through 7.3.6, an attacker can bypass specific stan…9.5
• CVE-2026-93485Improper Neutralization of Input During Web Page Generation …7.1
• CVE-2026-93488A flaw was found in Netty. SpdySessionHandler accepts an unl…7.5
• CVE-2026-93489Improper Authentication in ASUS router modules allows an una…8.7
• CVE-2026-9349A vulnerability was determined in calcom cal.diy up to 4.9.4…5.5
• CVE-2026-93491A flaw was found in Netty's HttpServerCodec. A remote, unaut…7.5
• CVE-2026-93492A flaw was found in Netty's HTTP/2 HpackEncoder. A remote at…5.3