CVE-2026-48189EPSS p25.4%

CVE-2026-48189CVE-2026-48189

otrs / otrs

Description

An improper Input Validation vulnerability in OTRS Customer Backend module allows to access customer information which are restricted to other groups. Please note that the feature has to be anabled and CustomerGroupSupport has to be used to be affected. This issue affects OTRS: * 7.0.X * 8.0.X * 2023.X * 2024.X * 2025.X * 2026.X before 2026.4.X

Scoring

CVSS 5.7 ()
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
EPSS0.34% probability of exploitation · percentile 25.4% · 2026-10-05T12:00:23Z
Last modified2026-07-22

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-48190
CVE
CVE-2026-48188
CVE
CVE-2026-48210
CVE
CVE-2026-48187
CVE
CVE-2026-48191
CVE
CVE-2026-48209
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.