Critical osTicket Vulnerability (CVE-2026-22200) Enables Remote Code Execution via PHP Filters

23 Jan 2026

cybersecurityvulnerabilityosTicketCVE-2026-22200remote_code_executionPHPexploit

A Reddit post shares a link to a blog article by Horizon3.ai detailing the CVE-2026-22200 vulnerability in osTicket. The article explains how attackers can exploit PHP filters and the "cnext" feature in osTicket to achieve remote code execution and gain a shell on the affected system.

Read the original article on reddit.com

Critical osTicket Vulnerability (CVE-2026-22200) Enables Remote Code Execution via PHP Filters | Cyber Hub