Vulnerabilities CVE-2026-48243

CVE-2026-48243

Medium

Open

TLP:CLEAR

Open ISES Tickets < 3.44.2 Hardcoded WhitePages API Key in wp1.php

NVD CVE.org

Supply Chain Attack

AI Analysis

No AI analysis yet.

Description

Open ISES Tickets before 3.44.2 embeds a hardcoded WhitePages reverse-phone API key in wp1.php that is committed to the public source repository. Any actor with read access to the source tree can extract the key and use it to make third-party API calls billed to or rate-limited against the original owner's WhitePages account.

Details

CVSS Score: 6.9
EPSS Score ⓘ: 0.22%

13.1th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Confidence: 90%
Published: May 21, 2026
Last Modified: Jul 28, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.