OTRS GmbH (former OTRS AG) — Vulnerabilities & Security Advisories 9

Browse all 9 CVE security advisories affecting OTRS GmbH (former OTRS AG). AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by OTRS GmbH (former OTRS AG): OTRS

CVEs 9

CVE ID	Title	CVSS	Severity	Published
CVE-2026-93582	Authentication Bypass via Spoofed Remote-User Header in HTTP Basic Authentication — OTRS CWE-290	9.4	Critical	2026-10-12
CVE-2026-93581	Insufficient Neutralization of Formula Elements in CSV Exports — OTRS CWE-1236	6.1	Medium	2026-10-12
CVE-2026-78359	Duplicate Identity / Identity Shadowing across CustomerUser backends — OTRS CWE-694	5.4	Medium	2026-10-12
CVE-2026-78358	Cross-Site Request Forgery in Administrative Actions — OTRS CWE-352	4.3	Medium	2026-10-12
CVE-2026-78357	Insufficient Session Revocation for JWT Authentication — OTRS CWE-613	9.1	Critical	2026-10-12
CVE-2026-78356	Unauthenticated Disclosure of Agent Frontend Configuration — OTRS CWE-497	5.3	Medium	2026-10-12
CVE-2026-78355	Path Traversal in SendSupportBundle allows File Deletion Outside the Intended Directory — OTRS CWE-22	8.7	High	2026-10-12
CVE-2026-48212	Stored XSS in external pages — OTRS CWE-79	4.8	Medium	2026-10-12
CVE-2026-48211	Cross-Site Request Forgery in Import/Export Admin console — OTRS CWE-352	5.4	Medium	2026-10-12

This page lists every published CVE security advisory associated with OTRS GmbH (former OTRS AG). Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.