CVE-2026-6060CWE-400CWE-770

Possible DoS via SQL Box

Medium · published April 20, 2026

CVSS v3.1
4.5
EPSS
0%
Percentile
26.1
In the wild
Unconfirmed
What it is

A vulnerability in the SQL Box in the admin interface of OTRS leads to an uncontrolled resource consumption leading to a DoS against the webserver. will be killed by the systemThis issue affects OTRS:

* 7.0.X

* 8.0.X

* 2023.X

* 2024.X

* 2025.X

* 2026.X before 2026.3.X

The record
Technical detail
CVSS v3.1
4.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00339 · 26.1th percentile
Weaknesses
CWE-400 · Uncontrolled Resource Consumption; CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-04-20T18:20Z
EPSS history
Timeline
  • 20 APR 18:20Z
    Possible DoS via SQL Box
    cvelistv5