← Database

CVE-2026-97735

HIGH CVSS: 8.0 Published: 2026-09-25 Modified: 2026-09-25

Description

ITFlow before 26.08 allows SVG attachments in the ticket email parser (cron/ticket_email_parser.php) for email messages that may arrive over SMTP from arbitrary senders.

Affected Platforms

Unknown

Weakness Type

CWE-79

References