PT-2026-45259 · Otrs · Otrs

Published 2026-06-01 · Updated 2026-06-01 · CVE-2026-48187

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OTRS versions 8.0.X OTRS versions 2023.X OTRS versions 2024.X OTRS versions 2025.X OTRS versions prior to 2026.4.X OTRS Community Edition 6.x OTRS 7.x

Description Uncontrolled allocation of resources without limits or throttling in the e-mail handling process can lead to excessive resource consumption, potentially causing the webserver to abort and resulting in a denial of service.

Recommendations Update OTRS versions 8.0.X, 2023.X, 2024.X, 2025.X, and versions prior to 2026.4.X to the latest available security release. Update OTRS Community Edition 6.x and OTRS 7.x to a version that addresses this resource allocation issue.

Fix

DoS

Resource Exhaustion

Allocation of Resources Without Limits

Weakness Enumeration

CWE-400

CWE-770

Related Identifiers

CVE-2026-48187

Affected Products

Otrs

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-48187 · Security Note
• https://t.me/CVEtracker/55433 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2061321851704328344 · Twitter Post
• https://otrs.com/release-notes/otrs-security-advisory-2026-06 · Note