CVE-2026-38447 | osTicket 1.18.3 Key Generation include/class.api.php entropy

August 3, 2026 Yanac

A vulnerability classified as problematic has been found in osTicket 1.18.3. Impacted is an unknown function of the file include/class.api.php of the component Key Generation. The manipulation leads to insufficient entropy.

This vulnerability is listed as CVE-2026-38447. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More