CVE-2026-48247Medium· 5.9▾ SunlitOpen ISES Tickets before 3.44.2 disables TLS certificate verification in incs/functions.inc.php by setting CURLOPT_SSL_VERIFYPEER to false (and not setting CURLOPT_SSL_VERIFYHOST) when issuing outbound HTTPS requests for general-purpose …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 32.5 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
Open ISES Tickets before 3.44.2 disables TLS certificate verification in incs/functions.inc.php by setting CURLOPT_SSL_VERIFYPEER to false (and not setting CURLOPT_SSL_VERIFYHOST) when issuing outbound HTTPS requests for general-purpose outbound HTTPS requests issued by the shared helper functions. An attacker positioned on the network path between the server and the remote endpoint can present a forged certificate to intercept, monitor, or modify the request and response, including any API keys or session-bearing data in transit.
Tickets < 3.44.2Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-48246Medium· 5.9Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in ajax/reports.php
CVE-2026-48248Medium· 5.9Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/login.inc.php
CVE-2026-48249Medium· 5.9Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in rm/incs/mobile_login.inc.php
CVE-2026-48214Medium· 5.4Open ISES Tickets < 3.44.2 Reflected XSS via add_nm.php ticket_id Parameter
CVE-2026-48213Medium· 5.4Open ISES Tickets < 3.44.2 Reflected XSS via add.php ticket_id Parameter
CVE-2026-48216Medium· 5.4Open ISES Tickets < 3.44.2 Reflected XSS via db_loader.php Multiple POST Parameters