CVE Feed

    Dashboard / CVE / CVE-2026-48249

    CVE-2026-48249

    Open ISES Tickets before 3.44.2 disables TLS certificate verification in rm/incs/mobile_login.inc.php by setting CURLOPT_SSL_VERIFYPEER to false (and not setting CURLOPT_SSL_VERIFYHOST) when issuing outbound HTTPS requests issued during the mobile (RouteMate) login flow. An attacker positioned on the network path between the server and the remote endpoint can present a forged certificate to intercept, monitor, or modify the request and response, including any API keys or session-bearing data in transit.

    Published:May 21, 2026
    Last Modified:Jul 28, 2026
    EPS:May 21, 2026
    EPSS Score:0.00173
    CVSS Score:5.9

    Affected Products

    Vendor
    Openises
    Product
    Tickets
    Vendor
    Tickets Project
    Product
    Tickets

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-295 Improper Certificate Validation

    Related CVEs

    CVE-2026-48248 (CVSS 8.2) — Open ISES Tickets before 3.44.2 disables TLS certificate verification in incs/login.inc.php by setting CURLOPT…
    CVE-2026-48247 (CVSS 8.2) — Open ISES Tickets before 3.44.2 disables TLS certificate verification in incs/functions.inc.php by setting CUR…
    CVE-2026-48246 (CVSS 8.2) — Open ISES Tickets before 3.44.2 disables TLS certificate verification in ajax/reports.php by setting CURLOPT_S…
    CVE-2026-48245 (CVSS 6.9) — Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in tables.php that is committed to the …
    CVE-2026-48244 (CVSS 6.9) — Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in settings.inc.php that is committed t…
    CVE-2026-48243 (CVSS 6.9) — Open ISES Tickets before 3.44.2 embeds a hardcoded WhitePages reverse-phone API key in wp1.php that is committ…
    CVE-2026-48242 (CVSS 9.2) — Open ISES Tickets before 3.44.2 contains hardcoded MySQL database connection credentials (host, username, pass…
    CVE-2026-48241 (CVSS 9.2) — Open ISES Tickets before 3.44.2 contains hardcoded MySQL database credentials in loader.php (a public-facing d…
    CVE-2026-48240 (CVSS 7.1) — Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in ajax/statistics.php where the tick_i…
    CVE-2026-48239 (CVSS 7.1) — Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in ajax/reports.php where the tick_id P…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High