CVE-2026-38444
In-the-Wild Activity Observed github_trending · low
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-38444
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
osTicket v1.18.3 is vulnerable to Stored Cross-Site Scripting (XSS) via the email From-header display name. The value is extracted without sanitization in include/class.mailparse.php and stored raw in the poster field of ost_thread_entry. When an unauthenticated attacker sends a reply email to an existing ticket from an unregistered address with an XSS payload in the From display name.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
osTicket 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
osTicket是osTicket公司开源的一款客服工单管理系统。 osTicket 1.18.3版本存在安全漏洞，该漏洞源于邮件From标头显示名称在include/class.mailparse.php文件中未经清理即提取，并原始存储于ost_thread_entry的poster字段，可能导致未经身份验证的攻击者通过向现有工单发送带有恶意载荷的回复邮件，造成存储型跨站脚本攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2026-38444
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-38444
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-38444 (1)
News Coverage for CVE-2026-38444 (1)
Same Patch Batch · n/a · 2026-08-03 · 20 CVEs total
| CVE-2026-18592 | 4.7 MEDIUM | osCommerce Email Template Configuration EmailController.php EmailController sql injection |
| CVE-2026-18682 | 3.1 LOW | OpenAkita File Upload API upload cross site scripting |
| CVE-2026-67978 | NASA cFS 安全漏洞 | |
| CVE-2026-67673 | OreSat Firmware 安全漏洞 | |
| CVE-2026-67975 | NASA cFS 安全漏洞 | |
| CVE-2026-67974 | NASA cFS 安全漏洞 | |
| CVE-2026-67970 | NASA cFS 安全漏洞 | |
| CVE-2026-67977 | NASA fprime framework 安全漏洞 | |
| CVE-2026-67973 | NASA cFS 安全漏洞 | |
| CVE-2026-67969 | NASA cFS 安全漏洞 | |
| CVE-2026-51190 | Serverless Devs 安全漏洞 | |
| CVE-2026-51775 | Fastadmin 安全漏洞 | |
| CVE-2026-67976 | NASA fprime framework 安全漏洞 | |
| CVE-2026-67972 | NASA cFS 安全漏洞 | |
| CVE-2026-52102 | openmediavault 安全漏洞 | |
| CVE-2026-52521 | Z-BlogPHP 安全漏洞 | |
| CVE-2026-52520 | Emlog CMS 安全漏洞 | |
| CVE-2026-38446 | osTicket 安全漏洞 | |
| CVE-2026-38447 | osTicket 安全漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
V. Comments for CVE-2026-38444
No comments yet