CVE-2026-48210— Possible information disclosure via External Interface
Possible ATT&CK Techniques 1AI
T1530 · Data from Cloud StorageGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-48210
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Possible information disclosure via External Interface
Source: CVE Program / CVE List V5
Vulnerability Description
An improper default configuration in OTRS 2026.3.1 causes ticket article forwarding actions to enforce the “Is visible for customer” flag by default and prevent users from disabling it via the UI. This leads to unintended exposure of internal ticket information to the External Frontend This issue affects OTRS 2026.3.1
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
OTRS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OTRS是德国OTRS公司的一个服务管理解决方案。 OTRS 2026.3.1版本存在安全漏洞，该漏洞源于默认配置不当导致工单文章转发操作默认强制启用Is visible for customer标志并阻止用户通过UI禁用，导致内部工单信息意外暴露给外部前端。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-48210
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-48210
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-48210 (1)
IV. Related Vulnerabilities
Same product: OTRS
- CVE-2026-48187
Email with special content can lead to DoS - CVE-2026-48188
SQL Injection via MySQL Quote Method - CVE-2026-48189
Bypass DedicatedAgentToCustomerGroups Setting - CVE-2026-48190
Incorrect handling of permissions in External Interface Conf - CVE-2026-48191
Wrong Permission Handling in Document Search Article Meta Fi
Same vendor: OTRS AG
- CVE-2026-48187
Email with special content can lead to DoS - CVE-2026-48188
SQL Injection via MySQL Quote Method - CVE-2026-48189
Bypass DedicatedAgentToCustomerGroups Setting - CVE-2026-48190
Incorrect handling of permissions in External Interface Conf - CVE-2026-48191
Wrong Permission Handling in Document Search Article Meta Fi
Same weakness: CWE-200
- CVE-2026-21784
HCL IntelliOps Event Management is affected by multiple secu - CVE-2026-76390
Information Disclosure through Splunk Web in Cisco Talos Int - CVE-2026-76366
Information Disclosure through the REST API in Splunk SOAR - CVE-2026-76262
Exposure of Sensitive Information to an Unauthorized Actor t - CVE-2026-76256
Information Exposure through REST API Endpoints in Splunk Se
V. Comments for CVE-2026-48210
No comments yet