Resource exhaustion in Otrs Ag
CVE-2026-48187
An uncontrolled allocation of resources without limits or throttling in the e-mail handling in OTRS allows excessive allocation which may lead to the abortion of the webserver.This issue affects OTRS: * 8.0.X * 2023.X * 2024.X …
Vulnerability class: DoS (Denial of Service)
EPSS: 0.000 (10.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.7 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H.
Affected products
- Otrs Ag — versions 7.0.x, 8.0.x, 2023.x
- Otrs Ag ((Otrs)) Community Edition — versions 6.x
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-48187?
- CVE-2026-48187 is a medium-severity vulnerability in Otrs Ag, classified under Uncontrolled Resource Consumption. CVSS score: 5.7/10. Published 2026-06-01.
- How severe is CVE-2026-48187?
- Medium severity. CVSS v3 base score is 5.7 out of 10.