Osticket

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 43
    Known Exploited: 0
    4
    Critical Level Threats
    11
    High Level Threats
    26
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-38447

    Predictable API Key Generation Enables Brute‑Force Access in osTicket 1.18.3

    Last Modified: Aug 04, 2026
    Published: Aug 03, 2026

    CVE-2026-38444

    Stored XSS via Email From Header in osTicket

    Last Modified: Aug 04, 2026
    Published: Aug 03, 2026

    CVE-2026-38446

    Stored Cross‑Site Scripting in osTicket Thread Entry Title Field

    Last Modified: Aug 04, 2026
    Published: Aug 03, 2026

    CVE-2026-14871

    osTicket v1.18.3 - v1.17.7 - BOLA/IDOR in ticket field viewing allows cross-department data disclosure

    Last Modified: Jul 17, 2026
    Published: Jul 17, 2026

    CVE-2026-36214

    Stored XSS via Bootstrap Tooltip in osTicket

    Last Modified: Aug 05, 2026
    Published: Jul 14, 2026
    Items Per Page
    Osticket Vulnerabilities & Security CVEs | CVE-DB