# OTRS GmbH (former OTRS AG) ((OTRS)) Community Edition.

Every CVE that names OTRS GmbH (former OTRS AG) ((OTRS)) Community Edition among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Authentication Bypass via Spoofed Remote-User Header in HTTP Basic Authentication](https://agentprime.io/advisories/CVE-2026-93582.md)
  `CVE-2026-93582` · CVE record: OTRS GmbH (former OTRS AG) OTRS and 1 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Authentication bypass
- [Insufficient Neutralization of Formula Elements in CSV Exports](https://agentprime.io/advisories/CVE-2026-93581.md)
  `CVE-2026-93581` · CVE record: OTRS GmbH (former OTRS AG) OTRS and 1 more · CVSS 6.1 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Other injection
- [Duplicate Identity / Identity Shadowing across CustomerUser backends](https://agentprime.io/advisories/CVE-2026-78359.md)
  `CVE-2026-78359` · CVE record: OTRS GmbH (former OTRS AG) OTRS and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-694, CWE-706
- [Cross-Site Request Forgery in Administrative Actions](https://agentprime.io/advisories/CVE-2026-78358.md)
  `CVE-2026-78358` · CVE record: OTRS GmbH (former OTRS AG) OTRS and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Cross-site request forgery (CSRF)
- [Path Traversal in SendSupportBundle allows File Deletion Outside the Intended Directory](https://agentprime.io/advisories/CVE-2026-78355.md)
  `CVE-2026-78355` · CVE record: OTRS GmbH (former OTRS AG) OTRS and 1 more · CVSS 8.7 High · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [Cross-Site Request Forgery in Import/Export Admin console](https://agentprime.io/advisories/CVE-2026-48211.md)
  `CVE-2026-48211` · CVE record: OTRS GmbH (former OTRS AG) OTRS and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Cross-site request forgery (CSRF)

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=otrs-gmbh-former-otrs-ag-otrs-community-edition>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/otrs-gmbh-former-otrs-ag-otrs-community-edition/>. Everything for agents: <https://agentprime.io/llms.txt>.