CVE-2026-48210EPSS p15.8%

CVE-2026-48210CVE-2026-48210

otrs / otrs

Description

An improper default configuration in OTRS 2026.3.1 causes ticket article forwarding actions to enforce the “Is visible for customer” flag by default and prevent users from disabling it via the UI. This leads to unintended exposure of internal ticket information to the External Frontend This issue affects OTRS 2026.3.1

Scoring

CVSS 5.7 ()
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
EPSS0.25% probability of exploitation · percentile 15.8% · 2026-06-19T12:03:05Z
Last modified2026-06-15

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-48190
CVE
CVE-2026-48189
CVE
CVE-2026-48208
CVE
CVE-2026-48188
CVE
CVE-2026-48209
CVE
CVE-2026-48191
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.