CVE-2026-77506: Znuny

Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS.

Affected products

• Znuny Znuny: from 6.0, before 6.5.22 (fixed in 6.5.22)

Published 2026-08-20. Last modified 2026-09-09.