Enhancesoft LLC CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL Enhancesoft LLC CVE published 2026-07-30

CVE-2026-18363

CVE-2026-18363 is a critical logic vulnerability in osTicket's password reset token validation routine. An attacker can reuse a valid password reset token to perform an unauthorized password reset, compromising the affected account. This issue affects versions prior to v1.17.8 and v1.18.4. The vulnerability allows an attacker to bypass the intended expiry validation of password reset tokens, potentially l [truncated]