CVE-2026-48187: Email with special content can lead to DoS
An uncontrolled allocation of resources without limits or throttling in the e-mail handling in OTRS allows excessive allocation which may lead to the abortion of the webserver.This issue affects OTRS:
8.0.X 2023.X 2024.X 2025.X 2026.X before 2026.4.X
Please note that ((OTRS)) Community Edition 6.x, OTRS 7.x and products based on the ((OTRS)) Community Edition also very likely to be affected
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OTRSto a version that resolves this vulnerability.Fixed in 2026.4.1
Event History
Frequently Asked Questions
What is the risk level of CVE-2026-48187?
CVE-2026-48187 has a risk score of 33 and a severity rating of medium (5.7).
How do I fix CVE-2026-48187?
To mitigate CVE-2026-48187, update to OTRS version 2026.4.1 or later.
Which versions of OTRS are affected by CVE-2026-48187?
CVE-2026-48187 affects OTRS versions 8.0.X, 2023.X, 2024.X, 2025.X, and 2026.X before 2026.4.X.
What type of vulnerability is CVE-2026-48187?
CVE-2026-48187 is a denial of service (DoS) vulnerability due to uncontrolled resource allocation in e-mail handling.
What can happen if CVE-2026-48187 is exploited?
Exploitation of CVE-2026-48187 can lead to excessive resource allocation, causing the webserver to abort.