OC
Product
((OTRS)) Community Edition
6
CVEs
0
On KEV
9.4
Max CVSS
6
New 30D
Severity mix
Critical 1High 1Medium 4Low 0
Watch
Add ((OTRS)) Community Edition to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-93582 | 9.4 | Oct 12 | Authentication Bypass via Spoofed Remote-User Header in HTTP Basic Authentication Affected: 6.x |
| CVE-2026-78355 | 8.7 | Oct 12 | Path Traversal in SendSupportBundle allows File Deletion Outside the Intended Directory Affected: 6.x |
| CVE-2026-93581 | 6.1 | Oct 12 | Insufficient Neutralization of Formula Elements in CSV Exports Affected: 6.x |
| CVE-2026-78359 | 5.4 | Oct 12 | Duplicate Identity / Identity Shadowing across CustomerUser backends Affected: 6.x |
| CVE-2026-48211 | 5.4 | Oct 12 | Cross-Site Request Forgery in Import/Export Admin console Affected: 6.x |
| CVE-2026-78358 | 4.3 | Oct 12 | Cross-Site Request Forgery in Administrative Actions Affected: 6.x |
Showing 6