Medium severity5.3NVD Advisory· Published May 21, 2026· Updated May 21, 2026
CVE-2026-48243
CVE-2026-48243
Description
Open ISES Tickets before 3.44.2 embeds a hardcoded WhitePages reverse-phone API key in wp1.php that is committed to the public source repository. Any actor with read access to the source tree can extract the key and use it to make third-party API calls billed to or rate-limited against the original owner's WhitePages account.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <3.44.2
Patches
Vulnerability mechanics
References
3News mentions
1- Open ISES Tickets: 25 CVEs Disclosed — SQLi, Hardcoded Credentials, and TLS Verification FlawsVypr Intelligence · May 21, 2026