Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-78356— Unauthenticated Disclosure of Agent Frontend Configuration

Quick assessment

Affected
OTRS GmbH (former OTRS AG) OTRS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

OTRS Agent 前端配置端点可在未经验证的情况下访问。此漏洞允许未认证远程用户获取内部应用程序配置信息，这些配置本应仅供已认证的 Agent 前端使用。暴露的信息可能包括已配置的前端路由及其关联的授权组、认证配置、启用的产品功能、第三方集成设置以及其他实现细节。 尽管暴露的配置信息不直接包含用户凭据，也无法直接对 OTRS 配置进行未授权的修改，但泄露的信息可能帮助攻击者对受影响的 OTRS 安装进行指纹识别，并发现已启用的功能或与安全相关的配置，从而为后续攻击做准备。 此问题影响以下版本的 OTRS： 8.

CVSS 5.3 · Medium EPSS 0.28% · P19

Affected Version Matrix 5

VendorProduct Version RangeStatus
OTRS GmbH (former OTRS AG) OTRS 8.0.x affected
2023.x affected
2024.x affected
2025.x affected
2026.x≤ 2026.6.x affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-78356

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Unauthenticated Disclosure of Agent Frontend Configuration
Source: CVE Program / CVE List V5
Vulnerability Description
The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated Agent Frontend. The exposed information may include configured frontend routes and their associated authorization groups, authentication configuration, enabled product features, third-party integration settings, and other implementation details. The exposed configuration does not directly contain user credentials or provide unauthorized modification of the OTRS configuration. However, the disclosed information may assist an attacker in fingerprinting the affected OTRS installation and identifying enabled functionality or security-relevant configuration that could be used to prepare further attacks. This issue affects OTRS: * 8.0.X * 2023.X * 2024.X * 2025.X * 2026.X before 2026.7.X
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
将系统数据暴露到未授权控制的范围
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
OTRS GmbH (former OTRS AG) OTRS 8.0.x -

II. Public POCs for CVE-2026-78356

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-78356

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-78356 (1)

Same Patch Batch · OTRS GmbH (former OTRS AG) · 2026-10-12 · 9 CVEs total

CVE-2026-93582 9.4 CRITICAL Authentication Bypass via Spoofed Remote-User Header in HTTP Basic Authentication
CVE-2026-78357 9.1 CRITICAL Insufficient Session Revocation for JWT Authentication
CVE-2026-78355 8.7 HIGH Path Traversal in SendSupportBundle allows File Deletion Outside the Intended Directory
CVE-2026-93581 6.1 MEDIUM Insufficient Neutralization of Formula Elements in CSV Exports
CVE-2026-48211 5.4 MEDIUM Cross-Site Request Forgery in Import/Export Admin console
CVE-2026-78359 5.4 MEDIUM Duplicate Identity / Identity Shadowing across CustomerUser backends
CVE-2026-48212 4.8 MEDIUM Stored XSS in external pages
CVE-2026-78358 4.3 MEDIUM Cross-Site Request Forgery in Administrative Actions

IV. Related Vulnerabilities

Same product: OTRS
Same vendor: OTRS GmbH (former OTRS AG)
Same weakness: CWE-497

V. Comments for CVE-2026-78356

No comments yet

Leave a comment