high8.0
CVE-2026-97735
ITFlow before 26.08 allows SVG attachments in the ticket email parser (cron/ticket_email_parser.php) for email messages that may arrive over SMTP from arbitrar…
Impact
ITFlow before 26.08 allows SVG attachments in the ticket email parser (cron/ticket_email_parser.php) for email messages that may arrive over SMTP from arbitrary senders.
Affected products
| Product | Affected versions |
|---|---|
| ITFlow | before 26.08 |
Versions were read from the advisory text. No structured product data has been published for this record yet.