User enumeration vulnerability in /pwreset.php in osTicket v1.18.2 allows remote attackers to enumerate valid usernames registered in the p…

Published Apr 2, 2026 · Updated Jul 5, 2026 · Assigned by mitre