OTRS GmbH (former OTRS AG) OTRS vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Latest OTRS GmbH (former OTRS AG) OTRS vulnerabilities

CVE-2026-93581 — Insufficient Neutralization of Formula Elements in CSV Exports (CVSS 6.1)
CVE-2026-78359 — Duplicate Identity / Identity Shadowing across CustomerUser backends (CVSS 5.4)
CVE-2026-78358 — Cross-Site Request Forgery in Administrative Actions (CVSS 4.3)
CVE-2026-78357 — Insufficient Session Revocation for JWT Authentication (CVSS 9.1)
CVE-2026-78356 — Unauthenticated Disclosure of Agent Frontend Configuration (CVSS 5.3)
CVE-2026-78355 — Path Traversal in SendSupportBundle allows File Deletion Outside the Intended Directory (CVSS 8.7)
CVE-2026-48212 — Stored XSS in external pages (CVSS 4.8)
CVE-2026-48211 — Cross-Site Request Forgery in Import/Export Admin console (CVSS 5.4)