CVE-2026-48242: Open Ises Tickets

High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Open ISES Tickets before 3.44.2 contains hardcoded MySQL database connection credentials (host, username, password, database name) in import_mdb.php. The credentials are embedded in source code committed to the public repository, allowing any reader of the source to obtain valid configuration values that may match deployed installations.

Affected products

• Open Ises Tickets: before 3.44.2 (fixed in 3.44.2)

Published 2026-05-21. Last modified 2026-07-23.