https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:41:37 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-323335 EUVD-2026-323335 https://cve.radiocsirt.org/vuln/euvd-2026-323335 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48210 <p>An improper default configuration in OTRS 2026.3.1 causes ticket article forwarding actions to enforce the “Is visible for customer” flag by default and prevent users from disabling it via the UI. This leads to unintended exposure of internal ticket information to the External Frontend</p> <p>This issue affects OTRS 2026.3.1</p> <p>An improper default configuration in OTRS 2026.3.1 causes ticket article forwarding actions to enforce the “Is visible for customer” flag by default and prevent users from disabling it via the UI. This leads to unintended exposure of internal ticket information to the External Frontend</p> <p>This issue affects OTRS 2026.3.1</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-48210 https://cve.radiocsirt.org/vuln/ghsa-f9pc-83mw-48hx <p>An improper default configuration in OTRS 2026.3.1 causes ticket article forwarding actions to enforce the “Is visible for customer” flag by default and prevent users from disabling it via the UI. This leads to unintended exposure of internal ticket information to the External Frontend</p> <p>This issue affects OTRS 2026.3.1</p> <p>An improper default configuration in OTRS 2026.3.1 causes ticket article forwarding actions to enforce the “Is visible for customer” flag by default and prevent users from disabling it via the UI. This leads to unintended exposure of internal ticket information to the External Frontend</p> <p>This issue affects OTRS 2026.3.1</p> https://cve.radiocsirt.org/vuln/ghsa-f9pc-83mw-48hx https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1748 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in OTRS ausnutzen, um einen Denial of Service zu verursachen, um eine SQL Injection durchzuführen, um Informationen offenzulegen und um einen XSS Angriff durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in OTRS ausnutzen, um einen Denial of Service zu verursachen, um eine SQL Injection durchzuführen, um Informationen offenzulegen und um einen XSS Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1748