CVE-2026-26895 in osTicket

Resumen (Inglés)

User enumeration vulnerability in /pwreset.php in osTicket v1.18.2 allows remote attackers to enumerate valid usernames registered in the platform.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Responsable

MITRE

Reservar

2026-02-16

Divulgación

2026-04-02

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
354932	osTicket pwreset.php divulgación de información	200	No está definido	No está definido	CVE-2026-26895

Fuentes

• MITRE
• NVD
• CVE Details