CVE-2026-48187: OTRS AG OTRS, отказ на услуга

Описание

Оригинално описание

An uncontrolled allocation of resources without limits or throttling in the e-mail handling in OTRS allows excessive allocation which may lead to the abortion of the webserver.This issue affects OTRS: * 8.0.X * 2023.X * 2024.X * 2025.X * 2026.X before 2026.4.X Please note that ((OTRS)) Community Edition 6.x, OTRS 7.x and products based on the ((OTRS)) Community Edition also very likely to be affected

Засегнати продукти

• OTRS AG OTRS: 7.0.x; 8.0.x; 2023.x; 2024.x; 2025.x; 2026.x до 2026.3.x
• OTRS AG ((OTRS)) Community Edition: 6.x

Вид слабост

• CWE-400 Неконтролирано потребление на ресурси
• CWE-770 Allocation of Resources Without Limits or Throttling

История

Други уязвимости в OTRS AG OTRS

• 9.1CVE-2026-48188
• 5.7CVE-2026-48189
• 3.5CVE-2026-48190
• 3.5CVE-2026-48191
• 6.5CVE-2026-48208

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-48187
• https://nvd.nist.gov/vuln/detail/CVE-2026-48187
• https://otrs.com/release-notes/otrs-security-advisory-2026-06/