Vulnerability in Enhancesoft Llc Osticket
CVE-2026-18363
A logic vulnerability in the password reset token validation routine implemented by osTicket in versions prior to v1.17.8 and v1.18.4. During the password reset process, the application retrieves the timestamp associated with the provided…
Affected products
- Enhancesoft Llc Osticket — versions 0
Weakness classification (CWE)
References
- cve-coordination@incibe.es (patch)