CVE-2026-48209高 7.1An improper neutralization of user-controllable input in OTRS or ((OTRS)) Community Edition ticket handling allows authenticated attackers t…
CVE-2026-48208中 6.5An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition ticket article rendering allows attackers to inject s…
CVE-2026-48191低 3.5An incorrect handling of permissions in STORM powered by OTRS and in OTRS (2026.x and above) Document Search Article Meta Filters modules al…
CVE-2026-48190低 3.5An incorrect handling of permissions in OTRS External Interface and the ConfigItem List module allows an authenticated customer to query the…
CVE-2026-48189中 5.7An improper Input Validation vulnerability in OTRS Customer Backend module allows to access customer information which are restricted to oth…