Question 1

What is CVE-2026-36214 — CVE-2026-36214?

Accepted Answer

osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 are vulnerable to a stored XSS due to a vulnerable Bootstrap Tooltip component and insufficient HTML sanitization, allowing remote attackers to execute arbitrary JavaScript in Agent or Admin sessions.

Question 2

What is the authoritative source for CVE-2026-36214?

Accepted Answer

CVE-2026-36214 (CVE-2026-36214) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-36214CVE-2026-36214

Description

Scoring