CVE-2026-78359

OTRS versions 7.0.X , 8.0.X , 2023.X , 2024.X , 2025.X , and 2026.X before 2026.7.X , as well as Community Edition 6.x and before , are vulnerable to Identity Shadowing . The root cause is that OTRS fails to enforce unique customer user email addresses across multiple configured backends (e.g., a...