CVE-2026-105454

A flaw was found in rt. The application fails to properly escape URLs when automatically generating hyperlinks in HTML ticket content. A remote, unauthenticated attacker can exploit this issue by submitting an email or ticket containing a specially crafted URL. When another user views the ticket...