What’s Vulnerable › Products

OTRS GmbH (former OTRS AG) ((OTRS)) Community Edition vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your OTRS GmbH (former OTRS AG) ((OTRS)) Community Edition version is affected

Latest OTRS GmbH (former OTRS AG) ((OTRS)) Community Edition vulnerabilities

• CVE-2026-93582 — Authentication Bypass via Spoofed Remote-User Header in HTTP Basic Authentication (CVSS 9.4)
• CVE-2026-93581 — Insufficient Neutralization of Formula Elements in CSV Exports (CVSS 6.1)
• CVE-2026-78359 — Duplicate Identity / Identity Shadowing across CustomerUser backends (CVSS 5.4)
• CVE-2026-78358 — Cross-Site Request Forgery in Administrative Actions (CVSS 4.3)
• CVE-2026-78355 — Path Traversal in SendSupportBundle allows File Deletion Outside the Intended Directory (CVSS 8.7)
• CVE-2026-48211 — Cross-Site Request Forgery in Import/Export Admin console (CVSS 5.4)