VYPR
← All advisories
Medium severity5.7NVD Advisory· Published Jun 1, 2026· Updated Jul 22, 2026

CVE-2026-48187

CVE-2026-48187

Description

An uncontrolled allocation of resources without limits or throttling in the e-mail handling in OTRS allows excessive allocation which may lead to the abortion of the webserver.This issue affects OTRS:

  • 8.0.X
  • 2023.X
  • 2024.X
  • 2025.X
  • 2026.X before 2026.4.X

Please note that ((OTRS)) Community Edition 6.x, OTRS 7.x and products based on the ((OTRS)) Community Edition also very likely to be affected

Affected products

4
  • OTRS/Otrs3 versions
    cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*range: >=7.0.0,<=8.0.37
    • cpe:2.3:a:otrs:otrs:*:*:*:*:community:*:*:*range: <=6.0.32
    • (no CPE)range: <2026.4.X
  • OTRS/((OTRS)) Community Editionllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.