Lucene search
+L

CVE-2026-22200

🗓️ 12 Jan 2026 18:34:12Reported by VulnCheckType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 233 Views

osTicket up to 1.18.2 permits file read via crafted filter expressions during ticket PDF export.

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
attackerkb
attackerkb
CVE-2026-22200
12 Jan 202618:34
–attackerkb
circl
Circl
CVE-2026-22200
12 Jan 202620:07
–circl
cnnvd
CNNVD
Enhancesoft osTicket injection vulnerability
12 Jan 202600:00
–cnnvd
cvelist
Cvelist
CVE-2026-22200 osTicket (1.18.x < 1.18.3, 1.17.x < 1.17.7) PDF Export Arbitrary File Read
12 Jan 202618:34
–cvelist
githubexploit
GithubExploit
Exploit for CVE-2024-2961
3 Mar 202611:37
–githubexploit
euvd
EUVD
EUVD-2026-1918
12 Jan 202618:34
–euvd
kitploit
Kitploit
osTicketFileReadIntoRCE
27 Oct 202614:00
–kitploit
kitploit
Kitploit
CVE-2026-22200
28 Oct 202602:19
–kitploit
mend
Mend
CVE-2026-22200
12 Jan 202618:34
–mend
metasploit
Metasploit
osTicket Arbitrary File Read via PHP Filter Chains in mPDF
13 Jan 202600:00
–metasploit
Rows per page
NVD
Vulners
CNA
Node
OR
enhancesoftosticketRange1.17–1.17.7
enhancesoftosticketRange1.18–1.18.3
[
  {
    "defaultStatus": "unaffected",
    "packageURL": "pkg:github/osTicket/osTicket",
    "platforms": [
      "Linux"
    ],
    "product": "osTicket",
    "repo": "https://github.com/osTicket/osTicket",
    "vendor": "Enhancesoft",
    "versions": [
      {
        "lessThan": "1.18.3",
        "status": "affected",
        "version": "1.18.0",
        "versionType": "semver"
      },
      {
        "lessThan": "1.17.7",
        "status": "affected",
        "version": "1.17.0",
        "versionType": "semver"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

14 Jul 2026 16:16Current
6.1Medium risk
Vulners AI Score6.1
CVSS 3.17.5
CVSS 48.7
EPSS0.73589
SSVC
233