CVE-2026-18363 | Enhancesoft osTicket up to 1.17.7/1.18.3 Password Reset Token Validation password recovery (EUVD-2026-51068)

July 30, 2026 Yanac

A vulnerability categorized as critical has been discovered in Enhancesoft osTicket up to 1.17.7/1.18.3. This issue affects some unknown processing of the component Password Reset Token Validation. Executing a manipulation can lead to weak password recovery.

The identification of this vulnerability is CVE-2026-18363. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More