CVE-2026-26895

概要

参考情報

• csacyber.com/blog/osticket-timing-vulnerability-understanding-the-risk · Exploit

osticket のその他の脆弱性

• CVE-2026-22200高 7.5Enhancesoft osTicket versions 1.18.x prior to 1.18.3 and 1.17.x prior to 1.17.7 contain an arbitrary file read vulnerability in the ticket P…
• CVE-2025-26241中 6.5A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket <=1.17.5 allows authenticated attackers to exe…
• CVE-2023-46967中 6.1Cross Site Scripting vulnerability in the sanitize function in Enhancesoft osTicket 1.18.0 allows a remote attacker to escalate privileges v…
• CVE-2023-27149中 4.8A stored cross-site scripting (XSS) vulnerability in Enhancesoft osTicket v1.17.2 allows attackers to execute arbitrary web scripts or HTML …
• CVE-2023-27148中 4.8A stored cross-site scripting (XSS) vulnerability in the Admin panel in Enhancesoft osTicket v1.17.2 allows attackers to execute arbitrary w…