CVE-2026-14871
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Jul 17, 2026
Vendor
unknown
Description
osTicket versions v1.18.3 and v1.17.7 contain a Broken Object Level Authorization (BOLA) leading to Insecure Direct Object Reference (IDOR) in the AJAX ticket-management subsystem.