Product by Best Practical

    RT

    48 known vulnerabilities in RT (Best Practical), 0 of them actively exploited (CISA KEV).

    Key figures

    48

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in RT (Best Practical)
    CriticalCVE-2026-44231

    RT: Privilege escalation and information disclosure via REST 2.0 user collection endpoint

    also in 3 other products

    		9.1
    HighCVE-2026-41075

    RT: SQL injection via entry_aggregator parameter in JSON search

    also in 3 other products

    		8.8
    HighCVE-2026-41076

    RT: LDAP authentication bypass via empty password

    also in 3 other products

    		8.1
    Not ratedCVE-2011-1688

    RT: Path Traversal

    		—
    Not ratedCVE-2011-4458

    RT: Code Execution

    		—
    Not ratedCVE-2011-5092

    RT: Privilege Escalation

    		—
    Not ratedCVE-2009-3585

    RT: Session Fixation

    		—
    Not ratedCVE-2013-3373

    RT: CRLF Injection

    		—
    Not ratedCVE-2014-1474

    RT: Denial of Service

    		—
    Not ratedCVE-2011-1690

    RT: security vulnerability

    		—
    Not ratedCVE-2011-1689

    RT: Cross-Site Scripting (XSS)

    		—
    Not ratedCVE-2013-3370

    RT: security vulnerability

    		—
    MediumCVE-2026-44227

    RT: Reflected Cross-Site Scripting via URL parameters

    also in 1 other product

    		6.1
    Not ratedCVE-2011-5093

    RT: Code Execution

    		—
    Not ratedCVE-2013-3371

    RT: Cross-Site Scripting (XSS)

    		—
    Not ratedCVE-2013-3372

    RT: Cross-Site Scripting (XSS)

    		—
    HighCVE-2026-41074

    RT has broken CSRF protection for authenticated users

    		7.1
    Not ratedCVE-2013-5587

    RT: Cross-Site Scripting (XSS)

    		—
    MediumCVE-2026-44230

    RT: Reflected Cross-Site Scripting in search results chart

    also in 1 other product

    		6.1
    Not ratedCVE-2011-0009

    RT: security vulnerability

    		—
    HighCVE-2025-30087

    Best Practical RT: Cross-site Scripting

    also in 3 other products

    		7.2
    Not ratedCVE-2009-4151

    RT: Session Fixation

    		—
    Not ratedCVE-2011-2083

    RT: Cross-Site Scripting (XSS)

    		—
    Not ratedCVE-2012-4734

    RT: Cross-Site Request Forgery (CSRF)

    		—
    MediumCVE-2026-44228

    RT: Stored Cross-Site Scripting via insufficient template escaping

    also in 1 other product

    		5.4

    All vulnerabilities in search

    All products by Best Practical