Vulnerability · Published May 21, 2026 · Assigned by VulnCheck
CVE-2026-48242Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in import_mdb.php
High 8.1
In plain English
A high-severity hard-coded credentials in Tickets from Open ISES. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).
Severity (CVSS 3.1)8.1High
Exploit odds (30 days)0.3%top 77.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Open ISES Tickets before 3.44.2 contains hardcoded MySQL database connection credentials (host, username, password, database name) in import_mdb.php. The credentials are embedded in source code committed to the public repository, allowing any reader of the source to obtain valid configuration values that may match deployed installations.
Affected products (as reported)
Weakness: CWE-798 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H