auxiliary/gather/osticket_arbitrary_file_read

functional

osTicket Arbitrary File Read via PHP Filter Chains in mPDF

view exploit source metasploittype auxiliarypublished 2026-01-13catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-22200US	high7.5	73.6% (99th)	Exploit	2026-01-12
Enhancesoft osTicket versions 1.18.x prior to 1.18.3 and 1.17.x prior to 1.17.7 contain an arbitrary file read vulnerability in the ticket PDF export functionality. A remote attack…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.