Skip to contentOtrs Gmbh (former Otrs Ag) Otrs vulnerabilities
- otrs ag ((otrs)) community edition, otrs gmbh (former otrs ag) otrs +1 moreAuthentication Bypass via Spoofed Remote-User Header in HTTP Basic AuthenticationCVE-2026-935829.4 Critical
- otrs ag ((otrs)) community edition, otrs +1 moreInsufficient Neutralization of Formula Elements in CSV ExportsCVE-2026-935816.1 Medium
- otrs ag ((otrs)) community edition, otrs +1 moreDuplicate Identity / Identity Shadowing across CustomerUser backendsCVE-2026-783595.4 Medium
- otrs ag ((otrs)) community edition, otrs +1 moreCross-Site Request Forgery in Administrative ActionsCVE-2026-783584.3 Medium
- otrs ag otrsInsufficient Session Revocation for JWT AuthenticationCVE-2026-783579.1 Critical
- otrs ag otrsUnauthenticated Disclosure of Agent Frontend ConfigurationCVE-2026-783565.3 Medium
- otrs ag ((otrs)) community edition, otrs +1 morePath Traversal in SendSupportBundle allows File Deletion Outside the Intended DirectoryCVE-2026-783558.7 High
- otrs ag otrsStored XSS in external pagesCVE-2026-482124.8 Medium
- otrs ag ((otrs)) community edition, otrs +1 moreCross-Site Request Forgery in Import/Export Admin consoleCVE-2026-482115.4 Medium