{"id":"CVE-2026-48188","state":"PUBLISHED","title":"SQL Injection via MySQL Quote Method","description":"An improper Input Validation vulnerability in OTRS or ((OTRS)) Community Edition database layer module allows an unauthenticated SQL injection which can lead to an authentication bypass. This issue only affects the system if the MySQL/MariaDB server is configured with the NO_BACKSLASH_ESCAPES SQL mode.\n\nThis issue affects OTRS: \n\n  *  7.0.X\n  *  8.0.X\n  *  2023.X\n  *  2024.X\n  *  2025.X\n  *  2026.X before 2026.4.X\n  *  (OTRS)) Community Edition: 6.0.x\n\nProducts based on the ((OTRS)) Community Edition also very likely to be affected","publishedAt":"2026-06-01T03:33:15.822Z","updatedAt":"2026-06-01T13:17:31.447Z","severity":{"score":9.1,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","source":"OTRS"},"assigner":"OTRS","products":["OTRS AG OTRS","OTRS AG ((OTRS)) Community Edition"],"affected":[{"vendor":"OTRS AG","product":"OTRS","defaultStatus":"affected","versions":[{"version":"7.0.x","status":"affected"},{"version":"8.0.x","status":"affected"},{"version":"2023.x","status":"affected"},{"version":"2024.x","status":"affected"},{"version":"2025.x","status":"affected"},{"version":"2026.x","status":"affected","lessThanOrEqual":"2026.3.x","versionType":"patch"}],"modules":["Database Layer"]},{"vendor":"OTRS AG","product":"((OTRS)) Community Edition","defaultStatus":"affected","versions":[{"version":"6.x","status":"affected"}]}],"references":["https://otrs.com/release-notes/otrs-security-advisory-2026-02/"],"weaknesses":["CWE-20"],"ingestedAt":"2026-10-29T20:12:07.131Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/48xxx/CVE-2026-48188.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-48188","state":"PUBLISHED","datePublished":"2026-06-01T03:33:15.822Z","dateUpdated":"2026-06-01T13:17:31.447Z","assignerShortName":"OTRS","assignerOrgId":"2e1bf29f-dc29-4ed8-830c-7b9348b6f0e8","dateReserved":"2026-05-21T07:53:13.254Z"},"containers":{"cna":{"title":"SQL Injection via MySQL Quote Method","descriptions":[{"lang":"en","value":"An improper Input Validation vulnerability in OTRS or ((OTRS)) Community Edition database layer module allows an unauthenticated SQL injection which can lead to an authentication bypass. This issue only affects the system if the MySQL/MariaDB server is configured with the NO_BACKSLASH_ESCAPES SQL mode.\n\nThis issue affects OTRS: \n\n  *  7.0.X\n  *  8.0.X\n  *  2023.X\n  *  2024.X\n  *  2025.X\n  *  2026.X before 2026.4.X\n  *  (OTRS)) Community Edition: 6.0.x\n\nProducts based on the ((OTRS)) Community Edition also very likely to be affected"}],"affected":[{"vendor":"OTRS AG","product":"OTRS","defaultStatus":"affected","versions":[{"version":"7.0.x","status":"affected"},{"version":"8.0.x","status":"affected"},{"version":"2023.x","status":"affected"},{"version":"2024.x","status":"affected"},{"version":"2025.x","status":"affected"},{"version":"2026.x","status":"affected","lessThanOrEqual":"2026.3.x","versionType":"patch"}],"modules":["Database Layer"]},{"vendor":"OTRS AG","product":"((OTRS)) Community Edition","defaultStatus":"affected","versions":[{"version":"6.x","status":"affected"}]}],"references":[{"url":"https://otrs.com/release-notes/otrs-security-advisory-2026-02/"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-20","description":"CWE-20 Improper Input Validation","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"OTRS","orgId":"2e1bf29f-dc29-4ed8-830c-7b9348b6f0e8","dateUpdated":"2026-06-01T03:33:15.822Z"},"credits":[{"lang":"en","type":"reporter","value":"Special thanks to Daniel Triznafor reporting this vulnerability"}],"datePublic":"2026-06-01T07:00:00.000Z","impacts":[{"capecId":"CAPEC-115","descriptions":[{"lang":"en","value":"CAPEC-115 Authentication Bypass"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Update to OTRS 2026.4.1. or later. Please note that there will be no OTRS 7 patches<br>"}],"value":"Update to OTRS 2026.4.1. or later. Please note that there will be no OTRS 7 patches"}],"source":{"advisory":"OSA-2026-02","defect":["Ticket#2026052110000134","Issue#4824","Issue#4859"],"discovery":"EXTERNAL"},"workarounds":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Reconfigure&nbsp;MySQL/MariaDB servernot to use&nbsp;<code>NO_BACKSLASH_ESCAPES</code> SQL"}],"value":"Reconfigure MySQL/MariaDB servernot to use NO_BACKSLASH_ESCAPES SQL"}],"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-06-01T13:17:22.840595Z","id":"CVE-2026-48188","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-06-01T13:17:31.447Z"}}]}}}