CVE-2026-97735
HIGH
NVD
CVSS Score
8
Severity
HIGH
Published
Sep 25, 2026
Vendor
unknown
Description
ITFlow before 26.08 allows SVG attachments in the ticket email parser (cron/ticket_email_parser.php) for email messages that may arrive over SMTP from arbitrary senders.