Request Tracker vulnerabilities

1 known vulnerability in Request Tracker from Bestpractical. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  rt: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-44231Jul 20, 2026Bestpractical

  RT is an open source, enterprise-grade issue and ticket tracking system. Versions prior to 5.0.10, 6.0.0 and above, prior to 6.0.3 contain an information disclosure and privilege escalation vulnerability in the REST 2.0 API. A privileged (non-administrative) u