


Perceptive Security
SOC/SIEM Consultancy

An improper Input Validation vulnerability in OTRS or ((OTRS)) Community Edition database layer module allows an unauthenticated SQL injection which can lead to…
Published:
31 May 2026 at 22:00:00
Alert date:
1 June 2026 at 05:01:35
Source:
nvd.nist.gov
Enterprise Applications, Database & Storage
A critical input validation vulnerability in OTRS and OTRS Community Edition database layer allows unauthenticated SQL injection leading to authentication bypass. The vulnerability affects multiple OTRS versions (6.0.x through 2026.x) and only impacts systems where MySQL/MariaDB is configured with NO_BACKSLASH_ESCAPES SQL mode. Products based on OTRS Community Edition are also likely affected. This represents a serious security risk allowing attackers to bypass authentication controls entirely.
Technical details
Mitigation steps:
Affected products:
OTRS
OTRS Community Edition
Related links:
https://nvd.nist.gov/vuln/detail/CVE-2026-48188
https://otrs.com/release-notes/otrs-security-advisory-2026-02/
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
