https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:32:49 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-323332 EUVD-2026-323332 https://cve.radiocsirt.org/vuln/euvd-2026-323332 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48191 <p>An incorrect handling of permissions in STORM powered by OTRS and in OTRS (2026.x and above) Document Search Article Meta Filters modules allows gaining knowledge about number of affected CIs, SLA and services without gaining access to them.</p> <p>This issue affects OTRS with STORM modules:</p> <p>* 7.0.X * 8.0.X * 2023.X * 2024.X * 2025.X * 2026.X before 2026.4.X</p> <p>An incorrect handling of permissions in STORM powered by OTRS and in OTRS (2026.x and above) Document Search Article Meta Filters modules allows gaining knowledge about number of affected CIs, SLA and services without gaining access to them.</p> <p>This issue affects OTRS with STORM modules:</p> <p>* 7.0.X * 8.0.X * 2023.X * 2024.X * 2025.X * 2026.X before 2026.4.X</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-48191 https://cve.radiocsirt.org/vuln/ghsa-gfw4-qw54-w5p8 <p>An incorrect handling of permissions in STORM powered by OTRS and in OTRS (2026.x and above) Document Search Article Meta Filters modules allows gaining knowledge about number of affected CIs, SLA and services without gaining access to them.</p> <p>This issue affects OTRS with STORM modules:</p> <p>* 7.0.X * 8.0.X * 2023.X * 2024.X * 2025.X * 2026.X before 2026.4.X</p> <p>An incorrect handling of permissions in STORM powered by OTRS and in OTRS (2026.x and above) Document Search Article Meta Filters modules allows gaining knowledge about number of affected CIs, SLA and services without gaining access to them.</p> <p>This issue affects OTRS with STORM modules:</p> <p>* 7.0.X * 8.0.X * 2023.X * 2024.X * 2025.X * 2026.X before 2026.4.X</p> https://cve.radiocsirt.org/vuln/ghsa-gfw4-qw54-w5p8 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1748 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in OTRS ausnutzen, um einen Denial of Service zu verursachen, um eine SQL Injection durchzuführen, um Informationen offenzulegen und um einen XSS Angriff durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in OTRS ausnutzen, um einen Denial of Service zu verursachen, um eine SQL Injection durchzuführen, um Informationen offenzulegen und um einen XSS Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1748