CVE-2026-48248

creationtimestamp| type| source ---|---|--- 2026-05-21 18:45:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmf3d3ehj52e 2026-05-21 19:17:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmf53dd7lx2e...

CVE-2026-48248 Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/login.inc.php

Open ISES Tickets before 3.44.2 disables TLS certificate verification in incs/login.inc.php by setting CURLOPTSSLVERIFYPEER to false and not setting CURLOPTSSLVERIFYHOST when issuing outbound HTTPS requests issued during the login/authentication flow. An attacker positioned on the network path...