CVE-2026-48187

Analyzed Analyzed - Analysis Complete

Uncontrolled Resource Allocation in OTRS Email Handling

Publication date: 2026-06-01

Last updated on: 2026-06-15

Assigner: OTRS AG

Description

An uncontrolled allocation of resources without limits or throttling in the e-mail handling in OTRS allows excessive allocation which may lead to the abortion of the webserver.This issue affects OTRS: * 8.0.X * 2023.X * 2024.X * 2025.X * 2026.X before 2026.4.X Please note that ((OTRS)) Community Edition 6.x, OTRS 7.x and products based on the ((OTRS)) Community Edition also very likely to be affected

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-01

Last Modified

2026-06-15

Generated

2026-07-11

AI Q&A

2026-06-01

EPSS Evaluated

2026-07-10

NVD

CVE-2026-48187

EUVD

EUVD-2026-33553

Affected Vendors & Products

Vendor	Product	Version / Range
otrs	otrs	to 6.0.32 (inc)
otrs	otrs	From 7.0.0 (inc) to 8.0.37 (inc)
otrs	otrs	From 2023.0.0 (inc) to 2026.4.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-770	The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This vulnerability is an uncontrolled allocation of resources without limits or throttling in the e-mail handling component of OTRS. It allows excessive resource allocation which may cause the webserver to abort or crash.

Impact Analysis

The impact of this vulnerability is that it can lead to the abortion or crashing of the webserver running OTRS. This can cause denial of service, making the affected system unavailable to users.

Compliance Impact

The provided information does not specify how the vulnerability CVE-2026-48187 affects compliance with common standards and regulations such as GDPR or HIPAA.

Mitigation Strategies

The recommended immediate step to mitigate this vulnerability is to update your OTRS installation to version 2026.4.1 or a later version.

There will be no patches for OTRS 7, so upgrading to a supported and fixed version is essential to prevent excessive resource allocation that could lead to webserver abortion.

Hi! I’m here to help you understand CVE-2026-48187. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70