Skip to content
OpenAdvisories
Critical · 9.1 CVE-2025-26847 EUVD-2025-14022GHSA-crjm-f8jp-7pww

An issue was discovered in Znuny before 7.1.5. When generating a support bundle, not all passwords are masked.

Published May 8, 2025 · Updated May 8, 2025 · Assigned by mitre

Description

An issue was discovered in Znuny before 7.1.5. When generating a support bundle, not all passwords are masked.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 znuny 6.5.15-2 —
Debian 13 znuny 6.5.15-2 —
Debian 12 znuny No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 znuny No fix yet —
Ubuntu 26.04 LTS znuny No fix yet —
Ubuntu 25.10 znuny No fix yet —
Ubuntu 24.04 LTS znuny No fix yet —

References