CVE-2026-48187
Analyzed Analyzed - Analysis Complete
Uncontrolled Resource Allocation in OTRS Email Handling

Publication date: 2026-06-01

Last updated on: 2026-06-15

Assigner: OTRS AG

Description
An uncontrolled allocation of resources without limits or throttling in the e-mail handling in OTRS allows excessive allocation which may lead to the abortion of the webserver.This issue affects OTRS: * 8.0.X * 2023.X * 2024.X * 2025.X * 2026.X before 2026.4.X Please note that ((OTRS)) Community Edition 6.x, OTRS 7.x and products based on the ((OTRS)) Community Edition also very likely to be affected
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-01
Last Modified
2026-06-15
Generated
2026-06-21
AI Q&A
2026-06-01
EPSS Evaluated
2026-06-20
NVD
CVE-2026-48187
EUVD
EUVD-2026-33553
Affected Vendors & Products
Showing 3 associated CPEs
Vendor Product Version / Range
otrs otrs to 6.0.32 (inc)
otrs otrs From 7.0.0 (inc) to 8.0.37 (inc)
otrs otrs From 2023.0.0 (inc) to 2026.4.1 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-770 The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
CWE-400 The product does not properly control the allocation and maintenance of a limited resource.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is an uncontrolled allocation of resources without limits or throttling in the e-mail handling component of OTRS. It allows excessive resource allocation which may cause the webserver to abort or crash.

Impact Analysis

The impact of this vulnerability is that it can lead to the abortion or crashing of the webserver running OTRS. This can cause denial of service, making the affected system unavailable to users.

Compliance Impact

The provided information does not specify how the vulnerability CVE-2026-48187 affects compliance with common standards and regulations such as GDPR or HIPAA.

Mitigation Strategies

The recommended immediate step to mitigate this vulnerability is to update your OTRS installation to version 2026.4.1 or a later version.

There will be no patches for OTRS 7, so upgrading to a supported and fixed version is essential to prevent excessive resource allocation that could lead to webserver abortion.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-48187. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart