THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-44230 (MEDIUM 6.1) — RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.4 up to (but not including) 5.0.10, and 6.0.0 up to (but not including) 6.0.3 contain a reflected Cross-Site Scripting (XSS) vulnerability where an attacker who can induce an authenticated RT us

[NVD] CVE-2026-44230 (MEDIUM 6.1) — RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.4 up to (but not including) 5.0.10, and 6.0.0 up to (but not including) 6.0.3 contain a reflected Cross-Site Scripting (XSS) vulnerability where an attacker who can induce an authenticated RT us

mednvdPublished 2026-07-20

CVE-2026-44230 CVSS: 6.1 MEDIUM Published: 2026-07-20T20:16:43.660

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.4 up to (but not including) 5.0.10, and 6.0.0 up to (but not including) 6.0.3 contain a reflected Cross-Site Scripting (XSS) vulnerability where an attacker who can induce an authenticated RT user to visit a crafted URL can execute arbitrary Java

MITRE ATT&CK techniques

JavaScriptT1059.007

Indicators of compromise

CVE-2026-44230cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-44230