CVE-2026-48242
High · 8.1CVSS
8.1
EPSS
0.5%
Published
May 21, 2026
CISA due date
—
The record
Open ISES Tickets before 3.44.2 contains hardcoded MySQL database connection credentials (host, username, password, database name) in import_mdb.php. The credentials are embedded in source code committed to the public repository, allowing any reader of the source to obtain valid configuration values that may match deployed installations.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-87950 Use of Hard-coded Credentials vulnerability in Drupal SAML SSO - Service Provider allows… CWE-798
- CVE-2026-75940 A vulnerability was reported in Lenovo Health Android Application, distributed… CWE-798
- CVE-2026-17038 DrEryk Gabinet before 11.5.0 uses hard-coded API credentials in its ticket reporting… CWE-798
- CVE-2026-81640 An attacker could derive the camera's Wi-Fi password and connect to its wireless network. CWE-798
- CVE-2026-79740 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-798
- CVE-2026-79950 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-798
- CVE-2026-79738 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-798
- CVE-2026-86464 In the current development version of Eclipse aeriOS, for which no official release has… CWE-798