What’s Vulnerable › Vulnerabilities
CVE-2026-6060: Possible DoS via SQL Box
- Severity: medium (CVSS 4.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-04-20 · updated 2026-06-17
- Weakness: CWE-400
Description
A vulnerability in the SQL Box in the admin interface of OTRS leads to an uncontrolled resource consumption leading to a DoS against the webserver. will be killed by the systemThis issue affects OTRS: * 7.0.X * 8.0.X * 2023.X * 2024.X * 2025.X * 2026.X before 2026.3.X
Affected products
- OTRS AG OTRS: from 2026.x through 2026.2.x; 7.0.x, 8.0.x, 2023.x, 2024.x, 2025.x
References
Get alerted when CVE-2026-6060 or the next vulnerability affects your stack