Best Practical Solutions

Products

ProductCVEsExploitedLatest
Request Tracker3–Oct 30, 2026
RT for Incident Response2–Oct 30, 2026

Exploited and recent CVEs

  • CVE-2026-105454 Medium 5.3 Stored XSS via crafted URLs in HTML ticket content in Request Tracker 0.4%
  • CVE-2026-105455 Medium 5.3 Stored XSS via related ticket subject on RTIR Split and Create Incident forms 0.4%
  • CVE-2026-105456 Medium 5.3 Stored XSS via HTML scrubber rule in RTIR 0.4%
  • CVE-2025-2545 Low 2.3 Deprecated 3DES cryptographic algorithm used by Request Tracker in emails encrypted with S/MIME 0.2%
  • CVE-2024-3262 Medium 5.5 Information exposure vulnerability in Request Tracker (RT) 0.3%