CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-44231

RT is an open source, enterprise-grade issue and ticket tracking system. Versions prior to 5.0.10, 6.0.0 and above, prior to 6.0.3 contain an information disclosure and privilege escalation vulnerability in the REST 2.0 API. A privileged (non-administrative) user can obtain authentication credentials belonging to other users — including users with administrative privileges — and use those credentials to read data as those users via RT's feed endpoints. The same request that exposes the credentials also rotates them, invalidating previously-distributed feed URLs across the instance. This issue has been fixed in versions 5.0.10 and 6.0.3.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 16.5%

CVSS Severity

CVSS v3 Score 9.1

References

Products affected by CVE-2026-44231

Bestpractical » Request Tracker » Version: 3.6.10

cpe:2.3:a:bestpractical:request_tracker:3.6.10
Bestpractical » Request Tracker » Version: 3.6.11

cpe:2.3:a:bestpractical:request_tracker:3.6.11
Bestpractical » Request Tracker » Version: 3.6.8

cpe:2.3:a:bestpractical:request_tracker:3.6.8
Bestpractical » Request Tracker » Version: 3.8.10

cpe:2.3:a:bestpractical:request_tracker:3.8.10
Bestpractical » Request Tracker » Version: 3.8.11

cpe:2.3:a:bestpractical:request_tracker:3.8.11
Bestpractical » Request Tracker » Version: 3.8.12

cpe:2.3:a:bestpractical:request_tracker:3.8.12
Bestpractical » Request Tracker » Version: 3.8.13

cpe:2.3:a:bestpractical:request_tracker:3.8.13
Bestpractical » Request Tracker » Version: 3.8.14

cpe:2.3:a:bestpractical:request_tracker:3.8.14
Bestpractical » Request Tracker » Version: 3.8.15

cpe:2.3:a:bestpractical:request_tracker:3.8.15
Bestpractical » Request Tracker » Version: 3.8.16

cpe:2.3:a:bestpractical:request_tracker:3.8.16
Bestpractical » Request Tracker » Version: 3.8.17

cpe:2.3:a:bestpractical:request_tracker:3.8.17
Bestpractical » Request Tracker » Version: 3.8.3

cpe:2.3:a:bestpractical:request_tracker:3.8.3
Bestpractical » Request Tracker » Version: 3.8.4

cpe:2.3:a:bestpractical:request_tracker:3.8.4
Bestpractical » Request Tracker » Version: 3.8.7

cpe:2.3:a:bestpractical:request_tracker:3.8.7
Bestpractical » Request Tracker » Version: 3.8.8

cpe:2.3:a:bestpractical:request_tracker:3.8.8
Bestpractical » Request Tracker » Version: 3.8.9

cpe:2.3:a:bestpractical:request_tracker:3.8.9
Bestpractical » Request Tracker » Version: 4.0.0

cpe:2.3:a:bestpractical:request_tracker:4.0.0
Bestpractical » Request Tracker » Version: 4.0.1

cpe:2.3:a:bestpractical:request_tracker:4.0.1
Bestpractical » Request Tracker » Version: 4.0.10

cpe:2.3:a:bestpractical:request_tracker:4.0.10
Bestpractical » Request Tracker » Version: 4.0.11

cpe:2.3:a:bestpractical:request_tracker:4.0.11
Bestpractical » Request Tracker » Version: 4.0.12

cpe:2.3:a:bestpractical:request_tracker:4.0.12
Bestpractical » Request Tracker » Version: 4.0.13

cpe:2.3:a:bestpractical:request_tracker:4.0.13
Bestpractical » Request Tracker » Version: 4.0.14

cpe:2.3:a:bestpractical:request_tracker:4.0.14
Bestpractical » Request Tracker » Version: 4.0.15

cpe:2.3:a:bestpractical:request_tracker:4.0.15
Bestpractical » Request Tracker » Version: 4.0.16

cpe:2.3:a:bestpractical:request_tracker:4.0.16
Bestpractical » Request Tracker » Version: 4.0.17

cpe:2.3:a:bestpractical:request_tracker:4.0.17
Bestpractical » Request Tracker » Version: 4.0.18

cpe:2.3:a:bestpractical:request_tracker:4.0.18
Bestpractical » Request Tracker » Version: 4.0.19

cpe:2.3:a:bestpractical:request_tracker:4.0.19
Bestpractical » Request Tracker » Version: 4.0.2

cpe:2.3:a:bestpractical:request_tracker:4.0.2
Bestpractical » Request Tracker » Version: 4.0.20

cpe:2.3:a:bestpractical:request_tracker:4.0.20
Bestpractical » Request Tracker » Version: 4.0.21

cpe:2.3:a:bestpractical:request_tracker:4.0.21
Bestpractical » Request Tracker » Version: 4.0.22

cpe:2.3:a:bestpractical:request_tracker:4.0.22
Bestpractical » Request Tracker » Version: 4.0.23

cpe:2.3:a:bestpractical:request_tracker:4.0.23
Bestpractical » Request Tracker » Version: 4.0.24

cpe:2.3:a:bestpractical:request_tracker:4.0.24
Bestpractical » Request Tracker » Version: 4.0.25

cpe:2.3:a:bestpractical:request_tracker:4.0.25
Bestpractical » Request Tracker » Version: 4.0.3

cpe:2.3:a:bestpractical:request_tracker:4.0.3
Bestpractical » Request Tracker » Version: 4.0.4

cpe:2.3:a:bestpractical:request_tracker:4.0.4
Bestpractical » Request Tracker » Version: 4.0.5

cpe:2.3:a:bestpractical:request_tracker:4.0.5
Bestpractical » Request Tracker » Version: 4.0.6

cpe:2.3:a:bestpractical:request_tracker:4.0.6
Bestpractical » Request Tracker » Version: 4.0.7

cpe:2.3:a:bestpractical:request_tracker:4.0.7
Bestpractical » Request Tracker » Version: 4.0.8

cpe:2.3:a:bestpractical:request_tracker:4.0.8
Bestpractical » Request Tracker » Version: 4.0.9

cpe:2.3:a:bestpractical:request_tracker:4.0.9
Bestpractical » Request Tracker » Version: 4.1.0

cpe:2.3:a:bestpractical:request_tracker:4.1.0
Bestpractical » Request Tracker » Version: 4.1.1

cpe:2.3:a:bestpractical:request_tracker:4.1.1
Bestpractical » Request Tracker » Version: 4.1.10

cpe:2.3:a:bestpractical:request_tracker:4.1.10
Bestpractical » Request Tracker » Version: 4.1.11

cpe:2.3:a:bestpractical:request_tracker:4.1.11
Bestpractical » Request Tracker » Version: 4.1.12

cpe:2.3:a:bestpractical:request_tracker:4.1.12
Bestpractical » Request Tracker » Version: 4.1.13

cpe:2.3:a:bestpractical:request_tracker:4.1.13
Bestpractical » Request Tracker » Version: 4.1.14

cpe:2.3:a:bestpractical:request_tracker:4.1.14
Bestpractical » Request Tracker » Version: 4.1.15

cpe:2.3:a:bestpractical:request_tracker:4.1.15
Bestpractical » Request Tracker » Version: 4.1.16

cpe:2.3:a:bestpractical:request_tracker:4.1.16
Bestpractical » Request Tracker » Version: 4.1.17

cpe:2.3:a:bestpractical:request_tracker:4.1.17
Bestpractical » Request Tracker » Version: 4.1.18

cpe:2.3:a:bestpractical:request_tracker:4.1.18
Bestpractical » Request Tracker » Version: 4.1.19

cpe:2.3:a:bestpractical:request_tracker:4.1.19
Bestpractical » Request Tracker » Version: 4.1.20

cpe:2.3:a:bestpractical:request_tracker:4.1.20
Bestpractical » Request Tracker » Version: 4.1.21

cpe:2.3:a:bestpractical:request_tracker:4.1.21
Bestpractical » Request Tracker » Version: 4.1.22

cpe:2.3:a:bestpractical:request_tracker:4.1.22
Bestpractical » Request Tracker » Version: 4.1.23

cpe:2.3:a:bestpractical:request_tracker:4.1.23
Bestpractical » Request Tracker » Version: 4.1.4

cpe:2.3:a:bestpractical:request_tracker:4.1.4
Bestpractical » Request Tracker » Version: 4.1.5

cpe:2.3:a:bestpractical:request_tracker:4.1.5
Bestpractical » Request Tracker » Version: 4.1.6

cpe:2.3:a:bestpractical:request_tracker:4.1.6
Bestpractical » Request Tracker » Version: 4.1.7

cpe:2.3:a:bestpractical:request_tracker:4.1.7
Bestpractical » Request Tracker » Version: 4.1.8

cpe:2.3:a:bestpractical:request_tracker:4.1.8
Bestpractical » Request Tracker » Version: 4.1.9

cpe:2.3:a:bestpractical:request_tracker:4.1.9
Bestpractical » Request Tracker » Version: 4.2.0

cpe:2.3:a:bestpractical:request_tracker:4.2.0
Bestpractical » Request Tracker » Version: 4.2.1

cpe:2.3:a:bestpractical:request_tracker:4.2.1
Bestpractical » Request Tracker » Version: 4.2.10

cpe:2.3:a:bestpractical:request_tracker:4.2.10
Bestpractical » Request Tracker » Version: 4.2.11

cpe:2.3:a:bestpractical:request_tracker:4.2.11
Bestpractical » Request Tracker » Version: 4.2.12

cpe:2.3:a:bestpractical:request_tracker:4.2.12
Bestpractical » Request Tracker » Version: 4.2.13

cpe:2.3:a:bestpractical:request_tracker:4.2.13
Bestpractical » Request Tracker » Version: 4.2.14

cpe:2.3:a:bestpractical:request_tracker:4.2.14
Bestpractical » Request Tracker » Version: 4.2.15

cpe:2.3:a:bestpractical:request_tracker:4.2.15
Bestpractical » Request Tracker » Version: 4.2.16

cpe:2.3:a:bestpractical:request_tracker:4.2.16
Bestpractical » Request Tracker » Version: 4.2.17

cpe:2.3:a:bestpractical:request_tracker:4.2.17
Bestpractical » Request Tracker » Version: 4.2.2

cpe:2.3:a:bestpractical:request_tracker:4.2.2
Bestpractical » Request Tracker » Version: 4.2.3

cpe:2.3:a:bestpractical:request_tracker:4.2.3
Bestpractical » Request Tracker » Version: 4.2.4

cpe:2.3:a:bestpractical:request_tracker:4.2.4
Bestpractical » Request Tracker » Version: 4.2.5

cpe:2.3:a:bestpractical:request_tracker:4.2.5
Bestpractical » Request Tracker » Version: 4.2.6

cpe:2.3:a:bestpractical:request_tracker:4.2.6
Bestpractical » Request Tracker » Version: 4.2.7

cpe:2.3:a:bestpractical:request_tracker:4.2.7
Bestpractical » Request Tracker » Version: 4.2.8

cpe:2.3:a:bestpractical:request_tracker:4.2.8
Bestpractical » Request Tracker » Version: 4.2.9

cpe:2.3:a:bestpractical:request_tracker:4.2.9
Bestpractical » Request Tracker » Version: 4.3.0

cpe:2.3:a:bestpractical:request_tracker:4.3.0
Bestpractical » Request Tracker » Version: 4.3.1

cpe:2.3:a:bestpractical:request_tracker:4.3.1
Bestpractical » Request Tracker » Version: 4.3.10

cpe:2.3:a:bestpractical:request_tracker:4.3.10
Bestpractical » Request Tracker » Version: 4.3.11

cpe:2.3:a:bestpractical:request_tracker:4.3.11
Bestpractical » Request Tracker » Version: 4.3.12

cpe:2.3:a:bestpractical:request_tracker:4.3.12
Bestpractical » Request Tracker » Version: 4.3.13

cpe:2.3:a:bestpractical:request_tracker:4.3.13
Bestpractical » Request Tracker » Version: 4.3.2

cpe:2.3:a:bestpractical:request_tracker:4.3.2
Bestpractical » Request Tracker » Version: 4.3.3

cpe:2.3:a:bestpractical:request_tracker:4.3.3
Bestpractical » Request Tracker » Version: 4.3.5

cpe:2.3:a:bestpractical:request_tracker:4.3.5
Bestpractical » Request Tracker » Version: 4.3.6

cpe:2.3:a:bestpractical:request_tracker:4.3.6
Bestpractical » Request Tracker » Version: 4.3.7

cpe:2.3:a:bestpractical:request_tracker:4.3.7
Bestpractical » Request Tracker » Version: 4.3.8

cpe:2.3:a:bestpractical:request_tracker:4.3.8
Bestpractical » Request Tracker » Version: 4.3.9

cpe:2.3:a:bestpractical:request_tracker:4.3.9
Bestpractical » Request Tracker » Version: 4.4.0

cpe:2.3:a:bestpractical:request_tracker:4.4.0
Bestpractical » Request Tracker » Version: 4.4.1

cpe:2.3:a:bestpractical:request_tracker:4.4.1
Bestpractical » Request Tracker » Version: 4.4.2

cpe:2.3:a:bestpractical:request_tracker:4.4.2
Bestpractical » Request Tracker » Version: 4.4.3

cpe:2.3:a:bestpractical:request_tracker:4.4.3
Bestpractical » Request Tracker » Version: 4.4.4

cpe:2.3:a:bestpractical:request_tracker:4.4.4
Bestpractical » Request Tracker » Version: 4.4.5

cpe:2.3:a:bestpractical:request_tracker:4.4.5
Bestpractical » Request Tracker » Version: 4.4.6

cpe:2.3:a:bestpractical:request_tracker:4.4.6
Bestpractical » Request Tracker » Version: 4.4.7

cpe:2.3:a:bestpractical:request_tracker:4.4.7
Bestpractical » Request Tracker » Version: 4.4.8

cpe:2.3:a:bestpractical:request_tracker:4.4.8
Bestpractical » Request Tracker » Version: 4.4.9

cpe:2.3:a:bestpractical:request_tracker:4.4.9
Bestpractical » Request Tracker » Version: 5.0.0

cpe:2.3:a:bestpractical:request_tracker:5.0.0
Bestpractical » Request Tracker » Version: 5.0.1

cpe:2.3:a:bestpractical:request_tracker:5.0.1
Bestpractical » Request Tracker » Version: 5.0.2

cpe:2.3:a:bestpractical:request_tracker:5.0.2
Bestpractical » Request Tracker » Version: 5.0.3

cpe:2.3:a:bestpractical:request_tracker:5.0.3
Bestpractical » Request Tracker » Version: 5.0.4

cpe:2.3:a:bestpractical:request_tracker:5.0.4
Bestpractical » Request Tracker » Version: 5.0.5

cpe:2.3:a:bestpractical:request_tracker:5.0.5
Bestpractical » Request Tracker » Version: 5.0.6

cpe:2.3:a:bestpractical:request_tracker:5.0.6
Bestpractical » Request Tracker » Version: 5.0.7

cpe:2.3:a:bestpractical:request_tracker:5.0.7
Bestpractical » Request Tracker » Version: 5.0.8

cpe:2.3:a:bestpractical:request_tracker:5.0.8
Bestpractical » Request Tracker » Version: 5.0.9

cpe:2.3:a:bestpractical:request_tracker:5.0.9
Bestpractical » Request Tracker » Version: 6.0.0

cpe:2.3:a:bestpractical:request_tracker:6.0.0
Bestpractical » Request Tracker » Version: 6.0.2

cpe:2.3:a:bestpractical:request_tracker:6.0.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-44231

Products

Pricing

Contact Us