Question 1

What is CVE-2026-14871 — CVE-2026-14871?

Accepted Answer

osTicket versions v1.18.3 and v1.17.7 contain a Broken Object Level Authorization (BOLA) leading to Insecure Direct Object Reference (IDOR) in the AJAX ticket-management subsystem.

Question 2

What is the authoritative source for CVE-2026-14871?

Accepted Answer

CVE-2026-14871 (CVE-2026-14871) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-14871CVE-2026-14871

Description

Scoring