[CVE-2026-41073 ] Published: May 22, 2026, 10:16:00 PM UTC
RT is an open source, enterprise-grade issue and ticket tracking system. Versions prior to 5.0.10 and 6.0.0 through 6.0.2 contain a spreadsheet (CSV/formula) injection vulnerability. User-controlled d
Medium(4.6) Fixed Details (4) 4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u4
nvd · request-tracker4 · debian · bookworm; nvd · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u4
nvd · request-tracker4 · debian · bookworm; nvd · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u4
nvd · request-tracker4 · debian · bookworm; nvd · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u4
nvd · request-tracker4 · debian · bookworm; nvd · request-tracker4 · debian · 12
[CVE-2026-41076 ] Published: May 22, 2026, 9:36:21 PM UTC
RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.9 and prior in addition to 6.0.0 through 6.0.2 contain an authentication bypass vulnerability in RT installations
High(8.1) Fixed Details (4) 4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u4
nvd · request-tracker4 · debian · bookworm; nvd · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u4
nvd · request-tracker4 · debian · bookworm; nvd · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u4
nvd · request-tracker4 · debian · bookworm; nvd · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u4
nvd · request-tracker4 · debian · bookworm; nvd · request-tracker4 · debian · 12
[CVE-2026-41075 ] Published: May 22, 2026, 9:17:36 PM UTC
RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.0 through 5.0.9 and 6.0.0 through 6.0.2 contain an SQL injection vulnerability. An authenticated user can craft in
High(8.8) Fixed Details (4) 4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u4
nvd · request-tracker4 · debian · bookworm; nvd · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u4
nvd · request-tracker4 · debian · bookworm; nvd · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u4
nvd · request-tracker4 · debian · bookworm; nvd · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u4
nvd · request-tracker4 · debian · bookworm; nvd · request-tracker4 · debian · 12
[CVE-2026-41074 ] Published: May 22, 2026, 9:12:41 PM UTC
RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 through 6.0.2 contain a Cross-Site Request Forgery (CSRF) vulnerability. An attacker who can induce a logged-in
High(7.1) Not affected Details (4) 4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Not affected
nvd · request-tracker4 · debian · bookworm
4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Not affected
nvd · request-tracker4 · debian · bookworm
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Not affected
nvd · request-tracker4 · debian · bookworm
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Not affected
nvd · request-tracker4 · debian · bookworm
[CVE-2026-6841 ] Published: May 21, 2026, 11:49:07 AM UTC
Request Tracker is vulnerable to a reflected cross-site scripting (XSS) vulnerability via the "Page" parameter in GET requests. An attacker can craft a URL that, when opened, results in arbitrary Java
Medium(6.1) Fixed Details (4) 4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u4
nvd · request-tracker4 · debian · bookworm; nvd · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u4
nvd · request-tracker4 · debian · bookworm; nvd · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u4
nvd · request-tracker4 · debian · bookworm; nvd · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u4
nvd · request-tracker4 · debian · bookworm; nvd · request-tracker4 · debian · 12
[CVE-2026-44229 ] Published: May 21, 2026, 12:00:00 AM UTC
RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.0 and 6.0.0 and above, prior to both 5.0.10 and 6.0.3 contain a Cross-Site Scripting (XSS) vulnerability where upl
Medium(5.4) Fixed Details (4) 4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u4
nvd · request-tracker4 · debian · bookworm; nvd · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u4
nvd · request-tracker4 · debian · bookworm; nvd · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u4
nvd · request-tracker4 · debian · bookworm; nvd · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u4
nvd · request-tracker4 · debian · bookworm; nvd · request-tracker4 · debian · 12
[CVE-2026-44231 ] Published: May 21, 2026, 12:00:00 AM UTC
RT is an open source, enterprise-grade issue and ticket tracking system. Versions prior to 5.0.10, 6.0.0 and above, prior to 6.0.3 contain an information disclosure and privilege escalation vulnerabil
Critical(9.1) Fixed Details (4) 4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u4
nvd · request-tracker4 · debian · bookworm; nvd · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u4
nvd · request-tracker4 · debian · bookworm; nvd · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u4
nvd · request-tracker4 · debian · bookworm; nvd · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u4
nvd · request-tracker4 · debian · bookworm; nvd · request-tracker4 · debian · 12
[CVE-2026-44227 ] Published: May 20, 2026, 7:48:05 PM UTC
RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3 contain a reflected Cross-Site Scripting (XSS) vulnerability. An attacker who can indu
Medium(6.1) Not affected Details (4) 4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Not affected
nvd · request-tracker4 · debian · bookworm
4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Not affected
nvd · request-tracker4 · debian · bookworm
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Not affected
nvd · request-tracker4 · debian · bookworm
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Not affected
nvd · request-tracker4 · debian · bookworm
[CVE-2025-30087 ] Published: May 28, 2025, 12:00:00 AM UTC
Request Tracker vulnerabilities
Medium(6.1) Fixed Details (4) 4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u2
usn · request-tracker4 · debian · bookworm; usn · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u2
usn · request-tracker4 · debian · bookworm; usn · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u2
usn · request-tracker4 · debian · bookworm; usn · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u2
usn · request-tracker4 · debian · bookworm; usn · request-tracker4 · debian · 12
[CVE-2025-2545 ] Published: May 5, 2025, 12:15:00 PM UTC
Request Tracker vulnerabilities
Medium Fixed Details (4) 4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u2
usn · request-tracker4 · debian · bookworm; usn · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u2
usn · request-tracker4 · debian · bookworm; usn · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u2
usn · request-tracker4 · debian · bookworm; usn · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u2
usn · request-tracker4 · debian · bookworm; usn · request-tracker4 · debian · 12
[CVE-2025-61873 ] Published: Jan 1, 2025, 12:00:00 AM UTC
request-tracker4: CVE-2025-61873
High(8) Fixed Details (4) 4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u3
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u3
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u3
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.4.6+dfsg-1.1+deb12u3
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
[CVE-2017-5943 ] Published: Jul 3, 2017, 4:29:00 PM UTC
request-tracker4: CVE-2017-5943
Medium Fixed Details (4) 4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.4.1-4
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.4.1-4
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.4.1-4
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.4.1-4
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
[CVE-2017-5944 ] Published: Jul 3, 2017, 4:29:00 PM UTC
request-tracker4: CVE-2017-5944
Medium Fixed Details (4) 4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.4.1-4
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.4.1-4
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.4.1-4
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.4.1-4
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
[CVE-2016-6127 ] Published: Jun 15, 2017, 12:00:00 AM UTC
request-tracker4: CVE-2016-6127
Medium Fixed Details (4) 4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.4.1-4
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.4.1-4
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.4.1-4
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.4.1-4
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
[CVE-2017-5361 ] Published: Jun 15, 2017, 12:00:00 AM UTC
request-tracker4: CVE-2017-5361
Medium Fixed Details (4) 4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.4.1-4
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.4.1-4
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.4.1-4
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.4.1-4
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
[CVE-2015-6506 ] Published: Sep 3, 2015, 2:59:00 PM UTC
request-tracker4: CVE-2015-6506
Medium Fixed Details (4) 4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.2.11-2
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.2.11-2
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.2.11-2
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.2.11-2
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
[CVE-2015-5475 ] Published: Aug 13, 2015, 12:00:00 AM UTC
request-tracker4: CVE-2015-5475
Medium Fixed Details (4) 4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.2.11-2
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.2.11-2
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.2.11-2
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.2.11-2
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
[CVE-2015-1464 ] Published: Mar 9, 2015, 2:59:06 PM UTC
request-tracker4: CVE-2015-1464
Medium Fixed Details (4) 4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.2.8-3
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm
Fixed · Fixed: 4.2.8-3
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.2.8-3
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12
4.4.6+dfsg-1.1+deb12u4 · all · bookworm-security
Fixed · Fixed: 4.2.8-3
dsa · request-tracker4 · debian · bookworm; dsa · request-tracker4 · debian · 12