CVE-2025-26844

Critical

An issue was discovered in Znuny through 7.1.3. A cookie is set without the HttpOnly flag.

mitre·CWE-1004·Published 2025-05-08

CVSS

9.8

EPSS

0.00

KEV

Exploits

cve.orgen

90 chars

An issue was discovered in Znuny through 7.1.3. A cookie is set without the HttpOnly flag.

NVDen

90 chars

An issue was discovered in Znuny through 7.1.3. A cookie is set without the HttpOnly flag.

NVDes

106 chars

Se detectó un problema en Znuny hasta la versión 7.1.3. Se establece una cookie sin el indicador HttpOnly.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	9.8	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	cve.org	9.8	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H