A vulnerability, which was classified as problematic, was found in Enhancesoft osTicket up to 1.18.2. This affects an unknown part of the component Ticket PDF Export. Such manipulation leads to injection.

This vulnerability is documented as CVE-2026-22200. The attack can be executed remotely. There is not any exploit available.