CVE-2026-48190EPSS p14.2%

CVE-2026-48190CVE-2026-48190

otrs / otrs

Description

An incorrect handling of permissions in OTRS External Interface and the ConfigItem List module allows an authenticated customer to query the system for CI information. Please note that CMDB has to be anabled and CustomerGroupSupport has to be used to be affected. This issue affects OTRS: * 7.0.X * 8.0.X * 2023.X * 2024.X * 2025.X * 2026.X before 2026.4.X

Scoring

CVSS 3.5 ()
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
EPSS0.24% probability of exploitation · percentile 14.2% · 2026-10-06T12:00:23Z
Last modified2026-07-22

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-48189
CVE
CVE-2026-48210
CVE
CVE-2026-48191
CVE
CVE-2026-48188
CVE
CVE-2026-48187
CVE
CVE-2026-4881
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.