Otrs Gmbh (Former Otrs Ag) ((Otrs)) Community Edition
3 CVEs affecting Otrs Gmbh (Former Otrs Ag) ((Otrs)) Community Edition. Latest disclosed: 2026-10-12. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-93582 | Critical | 9.4 | 2026-10-12 | The HTTP Basic Authentication modules in ((OTRS)) Community Edition 6 and prior accept the authenticated username from either the REMOTE_USER or HTTP_REMOTE_US… |
CVE-2026-78355 | High | 8.7 | 2026-10-12 | A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to reference file paths outside the intended d… |
CVE-2026-93581 | Medium | 6.1 | 2026-10-12 | User-controlled values are not sufficiently neutralized when included in CSV exports. Values originating from user input, including data submitted by authentic… |