As cited
Copy frozen at (site build).
vulnerabilities
Ticket to Shell: Exploiting PHP Filters and CNEXT in osTicket (CVE-2026-22200)
CVE-2026-22200 is a vulnerability in osTicket that enables unauthenticated attackers to read arbitrary files from affected servers. An attacker can inject a malicious PHP filter chain expression into a support ticket, then export the ticket to PDF format to extract sensitive data embedded as images within the document.
Why it matters: Organizations running osTicket must patch immediately, as the vulnerability allows file exfiltration without authentication and could expose configuration files, credentials, or other sensitive data stored on the server.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Ticket to Shell: Exploiting PHP Filters and CNEXT in osTicket (CVE-2026-22200)
A vulnerability in osTicket (CVE-2026-22200, CVSS 8.7) allows anonymous attackers to read arbitrary server files by injecting malicious PHP filter chain expressions into tickets and exporting them to PDF format. The flaw enables attackers to exfiltrate sensitive files embedded as bitmap images within the generated PDF documents.
Why it matters: Organizations running osTicket are exposed to unauthenticated file disclosure; patch or disable PDF export functionality immediately if you operate this helpdesk system.
- Source published
- First seen by Cybersecurity Tracker