THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-44227 (MEDIUM 6.1) — RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3 contain a reflected Cross-Site Scripting (XSS) vulnerability. An attacker who can induce an authenticated RT user to visit a crafted URL can execute arbitrary JavaScr

[NVD] CVE-2026-44227 (MEDIUM 6.1) — RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3 contain a reflected Cross-Site Scripting (XSS) vulnerability. An attacker who can induce an authenticated RT user to visit a crafted URL can execute arbitrary JavaScr

mednvdPublished 2026-07-20

CVE-2026-44227 CVSS: 6.1 MEDIUM Published: 2026-07-20T18:16:52.183

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3 contain a reflected Cross-Site Scripting (XSS) vulnerability. An attacker who can induce an authenticated RT user to visit a crafted URL can execute arbitrary JavaScript in that user's browser session. There are no eff

MITRE ATT&CK techniques

JavaScriptT1059.007

Indicators of compromise

CVE-2026-44227cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-44227