CVE-2026-48211

The OTRS software is vulnerable to a Cross-Site Request Forgery (CSRF) attack in its Import/Export Admin console. The root cause is that the AdminImportExport::TemplateDelete action fails to validate the request's ChallengeToken . This allows an unauthenticated remote attacker to trick an authent...