Best Practical Solutions has 3 CVEs on record. 3 were published in the last 90 days. The busiest recent month was October 2026 with 3. The median CVSS is 5.3 (medium). The most common weakness class is CWE-79 (3). Most affected products: RT for Incident Response (2), Request Tracker (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.3
- Publish → KEV
- —
- Last 90 days
- 3 prev 0
Weakness classes
Products
- RT for Incident Response 2
- Request Tracker 1
Worst active — by depth score
Best Practical Solutions vulnerabilities
CVEs affecting Best Practical Solutions, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-105456Medium· 5.3Stored XSS via HTML scrubber rule in RTIR
RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link that merely contains the placeholder, including links using the executable javascript: scheme. The change ap…
CVE-2026-105454Medium· 5.3Stored XSS via crafted URLs in HTML ticket content in Request Tracker
RT's automatic link creation for URLs in HTML ticket content does not HTML-escape the URL it places in the link. A URL crafted to break out of the link's address can add a script that runs when the ticket history is dis…
CVE-2026-105455Medium· 5.3Stored XSS via related ticket subject on RTIR Split and Create Incident forms
RTIR's ticket creation forms show the subject of the related ticket when splitting a ticket or creating an incident from a report, and they render that subject without HTML escaping. A ticket subject containing script r…