RT
Product
rt
by bestpractical · last CVE Jul 20, 2026
48
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 8Low 0
Watch

Add rt to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-41075
8.8
0%
May 22
RT: SQL injection via entry_aggregator parameter in JSON search
Affected: >= 5.0.0, < 5.0.10; >= 6.0.0, < 6.0.3
CVE-2026-41076
8.1
0%
May 22
RT: LDAP authentication bypass via empty password
Affected: < 5.0.10; >= 6.0.0, < 6.0.3
CVE-2026-41074
7.1
0%
May 22
RT has broken CSRF protection for authenticated users
Affected: >= 6.0.0, < 6.0.3
Showing 3