High severity8.1NVD Advisory· Published May 21, 2026· Updated May 21, 2026

CVE-2026-48242

Description

Open ISES Tickets before 3.44.2 contains hardcoded MySQL database connection credentials (host, username, password, database name) in import_mdb.php. The credentials are embedded in source code committed to the public repository, allowing any reader of the source to obtain valid configuration values that may match deployed installations.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Openises/Ticketsreferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <3.44.2

Patches

Vulnerability mechanics

References

github.com/openises/tickets/commit/ecfeb406a016766cae81c749e14b5145a9f2dbffnvd
github.com/openises/tickets/releases/tag/v3.44.2nvd
www.vulncheck.com/advisories/open-ises-tickets-hardcoded-mysql-credentials-in-import-mdb-phpnvd

News mentions

Open ISES Tickets: 25 CVEs Disclosed — SQLi, Hardcoded Credentials, and TLS Verification Flaws
Vypr Intelligence · May 21, 2026

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000