Linux Distros Unpatched Vulnerability : CVE-2026-78356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application...

CVE-2026-78356

The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated Agent Frontend. The exposed information may include configured frontend rout...

UBUNTU-CVE-2026-78356

The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated Agent Frontend. The exposed information may include configured frontend rout...

CVE-2026-78356

The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated Agent Frontend. The exposed information may include configured frontend rout...

EUVD-2026-97266

The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated Agent Frontend. The exposed information may include configured frontend rout...

CVE-2026-78356

The OTRS application is vulnerable to an unauthenticated disclosure of the Agent Frontend configuration. This flaw allows remote users to access an endpoint without authentication, retrieving internal details such as frontend routes , authorization groups , authentication configurations , enabled...

CVE-2026-78356 Unauthenticated Disclosure of Agent Frontend Configuration

The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated Agent Frontend. The exposed information may include configured frontend rout...

CVE-2026-78356: Exposure of Sensitive System Information to an Unauthorized Control Sphere

The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated Agent Frontend. The exposed information may include configured frontend rout...

PT-2026-110488

Name of the Vulnerable Software and Affected Versions OTRS versions 8.0.X OTRS versions 2023.X OTRS versions 2024.X OTRS versions 2025.X OTRS versions prior to 2026.7.X Description The Agent Frontend configuration endpoint can be accessed without authentication, allowing remote users to retrieve...

Open Ticket Request System Agent Frontend Information Disclosure Vulnerability

Open Ticket Request System OTRS is an open source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted through various channels such as phone calls, emails, etc. into different queues and service levels, and service personn...

UBUNTU-CVE-2017-15864

In the Agent Frontend in Open Ticket Request System OTRS 3.3.x through 3.3.18, with a crafted URL it is possible to gain information like database user and password...

CVE-2017-15864

In the Agent Frontend in Open Ticket Request System OTRS 3.3.x through 3.3.18, with a crafted URL it is possible to gain information like database user and password...

CVE-2017-15864

In the Agent Frontend in Open Ticket Request System OTRS 3.3.x through 3.3.18, with a crafted URL it is possible to gain information like database user and password...

CVE-2017-15864

In the Agent Frontend in Open Ticket Request System OTRS 3.3.x through 3.3.18, with a crafted URL it is possible to gain information like database user and password...

CVE-2017-15864

Removed by vendor...

CVE-2017-15864: Undefined Security Weakness

In the Agent Frontend in Open Ticket Request System OTRS 3.3.x through 3.3.18, with a crafted URL it is possible to gain information like database user and password...

PT-2017-14246

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions 3.3.x through 3.3.18 Description The issue allows an attacker to gain sensitive information, such as database user and password, by using a crafted URL in the Agent Frontend of OTRS. Recommendations For...