CyberSecBulletin

osTicket vulnerabilities

We track 1 vulnerability in osTicket products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 17, 2026.

1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score

Latest osTicket vulnerabilities

  • 7.1 High severity

    osTicket: Incorrect Authorization

    CVE-2026-14871osTicket

    osTicket versions v1.18.3 and v1.17.7 contain a Broken Object Level Authorization (BOLA) leading to Insecure Direct Object Reference (IDOR) in the AJAX ticket-management subsystem.