CVE-2026-48187CWE-400CWE-770

Email with special content can lead to DoS

Medium · published June 1, 2026

CVSS v3.1
5.7
EPSS
0%
Percentile
28.3
In the wild
Unconfirmed
What it is

An uncontrolled allocation of resources without limits or throttling in the e-mail handling in OTRS allows excessive allocation which may lead to the abortion of the webserver.This issue affects OTRS:

* 8.0.X

* 2023.X

* 2024.X

* 2025.X

* 2026.X before 2026.4.X

Please note that ((OTRS)) Community Edition 6.x, OTRS 7.x and products based on the ((OTRS)) Community Edition also very likely to be affected

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00358 · 28.3th percentile
Weaknesses
CWE-400 · Uncontrolled Resource Consumption; CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-06-01T03:33Z
EPSS history
Timeline
  • 01 JUN 03:33Z
    Email with special content can lead to DoS
    cvelistv5