CVE-2026-18818: Ehco1996 django-sspanel Support Ticket views.py TicketDetailView authorization
A weakness has been identified in Ehco1996 django-sspanel up to 2023.12.26. This affects the function TicketDetailView of the file apps/sspanel/views.py of the component Support Ticket Handler. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-18818?
The severity of CVE-2026-18818 is medium with a CVSS score of 6.3.
How do I fix CVE-2026-18818?
To fix CVE-2026-18818, update to the latest version of Ehco1996 django-sspanel released after 2023.12.26 that addresses this vulnerability.
What impact does CVE-2026-18818 have on my application?
CVE-2026-18818 can lead to an authorization bypass in the TicketDetailView of the support ticket handler, compromising security.
Is CVE-2026-18818 exploitable remotely?
Yes, CVE-2026-18818 can be exploited remotely by manipulating the TicketDetailView functionality.
What component of Ehco1996 django-sspanel is affected by CVE-2026-18818?
CVE-2026-18818 affects the TicketDetailView function in the apps/sspanel/views.py file of the support ticket handler.