https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:39:13.958366+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-323332 EUVD-2026-323332 2026-10-02T19:39:14.008974+00:00 EUVD-2026-323332 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48191 fkie_cve-2026-48191 2026-10-02T19:39:14.009011+00:00

An incorrect handling of permissions in STORM powered by OTRS and in OTRS (2026.x and above) Document Search Article Meta Filters modules allows gaining knowledge about number of affected CIs, SLA and services without gaining access to them.

This issue affects OTRS with STORM modules:

* 7.0.X * 8.0.X * 2023.X * 2024.X * 2025.X * 2026.X before 2026.4.X

 https://cve.radiocsirt.org/vuln/ghsa-gfw4-qw54-w5p8 GHSA-gfw4-qw54-w5p8 2026-10-02T19:39:14.009047+00:00

An incorrect handling of permissions in STORM powered by OTRS and in OTRS (2026.x and above) Document Search Article Meta Filters modules allows gaining knowledge about number of affected CIs, SLA and services without gaining access to them.

This issue affects OTRS with STORM modules:

* 7.0.X * 8.0.X * 2023.X * 2024.X * 2025.X * 2026.X before 2026.4.X

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1748 WID-SEC-W-2026-1748 — OTRS: Mehrere Schwachstellen 2026-10-02T19:39:14.009067+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in OTRS ausnutzen, um einen Denial of Service zu verursachen, um eine SQL Injection durchzuführen, um Informationen offenzulegen und um einen XSS Angriff durchzuführen.