CVE-2026-77506

Znuny versions prior to LTS 6.5.22 are vulnerable to a cross-site scripting (XSS) flaw in the AgentTicketEmailResend template, which could allow attackers to inject malicious scripts into the application. This vulnerability poses a medium risk as it could lead to unauthorized actions or data exposure for users interacting with affected email templates. Organizations using Znuny should prioritize patching to mitigate potential exploitation risks.