CVE-2026-50592

MediumCVSS 6.4/10Last modified Oct 6, 2026

Description

In Znuny LTS before 6.5.21 and Znuny before 7.3.3, there is reflected XSS in

AdminCommunicationLog (aka the communication log administration view).

Metrics

CVSS 3.1 6.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
ZnunyZnuny< 6.5.21; >= 7.0.0, < 7.3.3

References

Timeline

Published
Jun 5, 2026
Last modified
Oct 6, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-505937.3Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that CVE-2026-50606.5The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to Insecure Direct Object ReferenCVE-2026-506016.6A security vulnerability has been identified in the Planet9 desktop application where a hardcoded read-only API key permitted unauthorized aCVE-2026-506028.5A security vulnerability has been identified in Planet9 due to incorrect file permissions assigned to an application executable used by the CVE-2026-506034.9A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The vulnerability is cauCVE-2026-506044.9A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The socket handshake proCVE-2026-506057.4A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. Insufficient access contCVE-2026-506061.2A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The vulnerability isCVE-2026-506072.7A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. A WebSocket service CVE-2026-506081.2A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The WebSocket handshCVE-2026-506097.4A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. Insufficient access CVE-2026-50614.7The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper that may allow reading