https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T17:26:29.296308+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-36097 CVE-2021-36097 — Agents are able to lock the ticket without the "Owner" permission 2026-10-17T17:26:29.297489+00:00

Affected: OTRS AG OTRS

Agents are able to lock the ticket without the "Owner" permission. Once the ticket is locked, it could be moved to the queue where the agent has "rw" permissions and gain a full control. This issue affects: OTRS AG OTRS 8.0.x version: 8.0.16 and prior versions.