Medium severity5.3NVD Advisory· Published May 21, 2026· Updated May 21, 2026
CVE-2026-48245
CVE-2026-48245
Description
Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in tables.php that is committed to the public source repository. The key can be extracted by anyone with read access to the source and used to make Google Maps Platform requests billed against the original owner's Google Cloud project.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <3.44.2
Patches
Vulnerability mechanics
References
3News mentions
1- Open ISES Tickets: 25 CVEs Disclosed — SQLi, Hardcoded Credentials, and TLS Verification FlawsVypr Intelligence · May 21, 2026