{"uuid": "861a701e-2cfd-49d0-9e7f-4b3fa76b790e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18363", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrufcr4hqa24", "content": "osTicket CRITICAL vuln (CVE-2026-18363): Weak password reset logic lets attackers reuse valid reset tokens. Affects versions <1.17.8 & <1.18.4. Upgrade ASAP when patch is released; monitor reset activity. https://radar.offseq.com/threat/cve-2026-18363-cwe-640-weak-password-recovery-mechanism-for-...", "creation_timestamp": "2026-07-30T12:00:30.475999Z"}