horizon3ai/CVE-2026-22200

PoC

CVE-2026-22200: Arbitrary file read + CNEXT RCE in osTicket

view exploit source poc_in_githubauthor horizon3aipublished 2026-01-21catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-22200US	high7.5	73.6% (99th)	Exploit	2026-01-12
Enhancesoft osTicket versions 1.18.x prior to 1.18.3 and 1.17.x prior to 1.17.7 contain an arbitrary file read vulnerability in the ticket PDF export functionality. A remote attack…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.