{"type":"bundle","id":"bundle--78cfb0cf-015d-5e20-be0b-d92746918f22","objects":[{"type":"campaign","spec_version":"2.1","id":"campaign--4e19142d-1cc3-5a25-abe9-337f07bc627b","created":"2026-09-20T19:13:20.062Z","modified":"2026-09-20T19:13:20.062Z","name":"osTicket generates predictable API keys via MD5 hashing","description":"osTicket generates predictable API keys via MD5 hashing. Upgrade and rotate keys.","aliases":["CVE-2026-38447"],"first_seen":"2026-08-04T00:00:00.000Z","last_seen":"2026-08-04T12:00:00.000Z","objective":"Defensive public threat-intelligence record; see limitations and source references.","external_references":[{"source_name":"NVD CVE-2026-38447","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-38447"},{"source_name":"HOL Guard operator write-up","url":"https://hol.org/blog/cve-2026-38447-osticket-predictable-api-keys"},{"source_name":"CVE Record CVE-2026-38447","url":"https://www.cve.org/CVERecord?id=CVE-2026-38447"}]}]}