Best Practical Solutions
Vulnerability activity for Best Practical Solutions: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 3
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 3
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 3
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 5.3MediumOct 30, 2026Best Practical Solutions Request Tracker XSSCVE-2026-105454RT's automatic link creation for URLs in HTML ticket content does not HTML-escape the URL it places in the link. A URL crafted to break out of the link's address can add a script that runs when the ticket history is displayed, with no further action by the viewer. Anyone who
- 5.3MediumOct 30, 2026Best Practical Solutions RT for Incident Response XSSCVE-2026-105455RTIR's ticket creation forms show the subject of the related ticket when splitting a ticket or creating an incident from a report, and they render that subject without HTML escaping. A ticket subject containing script runs it when a user opens either form. RTIR grants everyon
- 5.3MediumOct 30, 2026Best Practical Solutions RT for Incident Response XSSCVE-2026-105456RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link that merely contains the placeholder, including links using the executable javascript: scheme. The change applies to the whole RT instance once RTIR is installed, no
Top products
- RT for Incident Response2 CVEs in the last year
- Request Tracker1 CVE in the last year
Advisories
Official advisories from the last 90 days that name this vendor's CVEs.
- ENISA EUVD · Oct 30, 2026EUVD-2026-114128 · RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any…CVE-2026-105456
- ENISA EUVD · Oct 30, 2026EUVD-2026-114131 · RT's automatic link creation for URLs in HTML ticket content does not HTML-escape the URL it places in the…CVE-2026-105454
- ENISA EUVD · Oct 30, 2026EUVD-2026-114130 · RTIR's ticket creation forms show the subject of the related ticket when splitting a ticket or creating an…CVE-2026-105455
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.