CVE-2026-6060
4.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
Summary
A vulnerability in the SQL Box in the admin interface of OTRS leads to an uncontrolled resource consumption leading to a DoS against the webserver. will be killed by the systemThis issue affects OTRS:
- 7.0.X
- 8.0.X
- 2023.X
- 2024.X
- 2025.X
- 2026.X before 2026.3.X
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| OTRS AG | OTRS | 7.0.x | affected |
| OTRS AG | OTRS | 8.0.x | affected |
| OTRS AG | OTRS | 2023.x | affected |
| OTRS AG | OTRS | 2024.x | affected |
| OTRS AG | OTRS | 2025.x | affected |
| OTRS AG | OTRS | 2026.x <= 2026.2.x | affected |
Weaknesses
- CWE-400: CWE-400 Uncontrolled Resource Consumption
- CWE-770: CWE-770 Allocation of Resources Without Limits or Throttling
Workarounds
Remove SQL Box from Admin Interface via System Configuration
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.