Osticket
55 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Osticket, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.
Osticket CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 1 |
| 2025-06 | 1 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 1 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 1 |
| 2026-05 | 0 |
| 2026-06 | 1 |
| 2026-07 | 3 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 55 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical4
- High11
- Medium36
- Low1
Latest CVEs
The 15 most recently published vulnerabilities affecting Osticket.
- CVE-2026-18363Weak password recovery mechanism in osTicket by Enhancesoft LLC—
- CVE-2026-14871osTicket v1.18.3 - v1.17.7 - BOLA/IDOR in ticket field viewing allows cross-department data disclosure—
- CVE-2026-36214osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 are vulnerable to a stored XSS due to a vulnerable Bootstrap Tooltip component and insufficient HTML sanitization, allowing rem...6.4
- CVE-2026-9507Session fixation vulnerability in Enhancesoft's osTicket—
- CVE-2026-26895User enumeration vulnerability in /pwreset.php in osTicket v1.18.2 allows remote attackers to enumerate valid usernames registered in the platform.5.3
- CVE-2026-22200osTicket (1.18.x < 1.18.3, 1.17.x < 1.17.7) PDF Export Arbitrary File Read7.5
- CVE-2025-45387osTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in /scp/ajax.php.5.4
- CVE-2025-26241A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket <=1.17.5 allows authenticated attackers to execute arbitrary SQL commands via the "keywords" and "topic...6.5
- CVE-2023-46967Cross Site Scripting vulnerability in the sanitize function in Enhancesoft osTicket 1.18.0 allows a remote attacker to escalate privileges via a crafted support ticket.6.1
- CVE-2023-27149A stored cross-site scripting (XSS) vulnerability in Enhancesoft osTicket v1.17.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Label input param...4.8
- CVE-2023-27148A stored cross-site scripting (XSS) vulnerability in the Admin panel in Enhancesoft osTicket v1.17.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into th...4.8
- CVE-2021-45811A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket 1.15.x allows authenticated attackers to execute arbitrary SQL commands via the "keywords" and "topic_i...6.5
- CVE-2023-30082A denial of service attack might be launched against the server if an unusually lengthy password (more than 10000000 characters) is supplied using the osTicket application. This can cause the websi...7.5
- CVE-2022-31888Session Fixation vulnerability in in function login in class.auth.php in osTicket through 1.16.2.8.8
- CVE-2023-1320Cross-site Scripting (XSS) - Stored in osticket/osticket6.1
Product grouping is registry-driven, with AI assist and human review. How it works