top of page
perceptive_background_267k.jpg

An improper Input Validation vulnerability in OTRS or ((OTRS)) Community Edition database layer module allows an unauthenticated SQL injection which can lead to…

Published:

31 May 2026 at 22:00:00

Alert date:

1 June 2026 at 05:01:35

Source:

nvd.nist.gov

Click to open the original link from this advisory

Enterprise Applications, Database & Storage

A critical input validation vulnerability in OTRS and OTRS Community Edition database layer allows unauthenticated SQL injection leading to authentication bypass. The vulnerability affects multiple OTRS versions (6.0.x through 2026.x) and only impacts systems where MySQL/MariaDB is configured with NO_BACKSLASH_ESCAPES SQL mode. Products based on OTRS Community Edition are also likely affected. This represents a serious security risk allowing attackers to bypass authentication controls entirely.

Technical details

Mitigation steps:

Affected products:

OTRS
OTRS Community Edition

Related links:

Related CVE's:

Related threat actors:

IOC's:

This article was created with the assistance of AI technology by Perceptive.

© 2025 by Perceptive Security. All rights reserved.

email: info@perceptivesecurity.com

Disclaimer: Deze website toont informatie afkomstig van externe bronnen. Perceptive aanvaardt geen verantwoordelijkheid voor de inhoud, juistheid of volledigheid van deze informatie.

bottom of page