CVE-2026-38446 Blast Radius

MEDIUM • CVSS 6.1A stored cross-site scripting (XSS) vulnerability exists in osTicket 1.18.3 due to improper sanitization of the thread entry title field. User-control…

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-38446.

Start Free Scan →← Back to CVE-2026-38446