Product by Ubuntu

    Request-tracker5

    6 known vulnerabilities in Request-tracker5 (Ubuntu), 0 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Request-tracker5 (Ubuntu)
    CriticalCVE-2026-44231

    RT: Privilege escalation and information disclosure via REST 2.0 user collection endpoint

    also in 4 other products

    		9.1
    HighCVE-2026-41075

    RT: SQL injection via entry_aggregator parameter in JSON search

    also in 3 other products

    		8.8
    HighCVE-2026-41076

    RT: LDAP authentication bypass via empty password

    also in 3 other products

    		8.1
    MediumCVE-2026-6841

    Reflected XSS in Request Tracker

    also in 3 other products

    		6.1
    MediumCVE-2026-44229

    RT: Cross-Site Scripting via inline-served uploaded content

    also in 4 other products

    		5.4
    MediumCVE-2026-41073

    RT: Spreadsheet downloads vulnerable to CSV/formula injection in Microsoft Excel and similar apps

    also in 3 other products

    		4.6

    All products by Ubuntu