PT-2026-42836 · Rt · Rt

Cbrandtbuffalo · Published 2026-05-22 · Updated 2026-05-23 · CVE-2026-41074

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

Name of the Vulnerable Software and Affected Versions RT versions 6.0.0 through 6.0.2

Description RT is an open source, enterprise-grade issue and ticket tracking system. A Cross-Site Request Forgery (CSRF) flaw allows an attacker to induce a logged-in user to visit a malicious web page, triggering arbitrary state-changing actions on behalf of that user. CSRF is a technique where a malicious site tricks a user's browser into performing an unwanted action on a different website where the user is authenticated.

Recommendations Update to version 6.0.3.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2026-41074

GHSA-265J-QX4W-256J

Affected Products

Rt

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41074.json · Exploit
• https://cve.org/CVERecord?id=CVE-2026-41074 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-41074 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-41074 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-41074 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-41074 · Security Note
• https://github.com/bestpractical/rt/security/advisories/GHSA-265j-qx4w-256j · Note
• https://github.com/bestpractical/rt/releases/tag/rt-6.0.3 · Note
• https://twitter.com/CVEnew/status/2058155775302984177 · Twitter Post
• https://t.me/CVEtracker/54678 · Telegram Post