Product
Open ISES Tickets versions before 3.44.2 are vulnerable to SQL injection (CVE-2026-48235) due to unsanitized GPS data, allowing attackers to manipulate responder data by compromising the GPS tracker endpoint.