CVE-2026-18818: django-sspanel 2023.12.0, 2023.12.1, 2023.12.2, 2023.12.3, 2023.12.4, 2023.12.5, 2023.12.6, 2023.12.7, 2023.12.8…

Affected technology

django-sspanel · 2023.12.0, 2023.12.1, 2023.12.2, 2023.12.3, 2023.12.4, 2023.12.5, 2023.12.6, 2023.12.7, 2023.12.8, 2023.12.9, 2023.12.10, 2023.12.11, 2023.12.12, 2023.12.13, 2023.12.14, 2023.12.15, 2023.12.16, 2023.12.17, 2023.12.18, 2023.12.19, 2023.12.20, 2023.12.21, 2023.12.22, 2023.12.23, 2023.12.24, 2023.12.25, 2023.12.26
Ehco1996

Description’s affected range: up to 2023.12.26

Component: Support Ticket Handler
Function: TicketDetailView
File: apps/sspanel/views.py

Attack conditions (VulDB, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

VulDB’s CVSS 4.0 assessment (base score 5.3/10) rates confidentiality, integrity and availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.