High severity8.0NVD Advisory· Published Sep 25, 2026

CVE-2026-97735

Description

ITFlow before 26.08 allows SVG attachments in the ticket email parser (cron/ticket_email_parser.php) for email messages that may arrive over SMTP from arbitrary senders.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Itflow Org/Itflowllm-fuzzy
Range: <26.08

Patches

Vulnerability mechanics

References

github.com/itflow-org/itflow/commit/16000efcf7f7c833aae9f8da22d2a82df21a49c0nvd
github.com/itflow-org/itflow/security/advisories/GHSA-89fw-w69c-vghjnvd

News mentions

No linked articles in our index yet.

cvss	0.520
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000