Is CVE-2026-78356 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-78356 being exploited in the wild.

How severe is CVE-2026-78356?

Medium severity, with a CVSS score of 5.3, published 12 October 2026.

Which products and versions are affected?

Otrs 8.0.X, 2023.X, 2024.X, 2025.X, 2026.X before 2026.7.X.

Is there a fix for CVE-2026-78356?

Yes: fixed in 2026.7.X. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-78356 attacked?

It is attacked over the network, in a hosted service.

Am I affected by CVE-2026-78356?

Check whether you run Otrs at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-78356: OTRS Agent Frontend authentication bypass in configuration endpoint

CVE-2026-78356 · Severity: medium · CVSS 5.3 · Published 2026-10-12

OTRS is a service management platform that helps organizations manage IT support requests and customer service tickets. An unauthenticated attacker can access the Agent Frontend configuration endpoint without logging in, exposing internal application settings, feature flags, and integration details that could be used to identify system weaknesses for follow-up attacks. While sensitive credentials are not directly exposed, this information disclosure could enable reconnaissance and further exploitation.

Technologies: Otrs. Vendors: Otrs.

Quick answers

Is CVE-2026-78356 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-78356 being exploited in the wild.
How severe is CVE-2026-78356?: Medium severity, with a CVSS score of 5.3, published 12 October 2026.
Which products and versions are affected?: Otrs 8.0.X, 2023.X, 2024.X, 2025.X, 2026.X before 2026.7.X.
Is there a fix for CVE-2026-78356?: Yes: fixed in 2026.7.X. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-78356 attacked?: It is attacked over the network, in a hosted service.
Am I affected by CVE-2026-78356?: Check whether you run Otrs at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: 2026.7.X

Technical details

An authentication bypass vulnerability exists in the OTRS Agent Frontend configuration endpoint, allowing unauthenticated remote access to application configuration intended only for authenticated agents. The endpoint exposes routes, authorization groups, authentication configuration, product features, and third-party integration settings. This information disclosure does not grant direct credential access or configuration modification capability but facilitates attack reconnaissance and fingerprinting.

Affected products

OTRS OTRS 8.0.X, 2023.X, 2024.X, 2025.X, 2026.X before 2026.7.X

Timeline

2026-10-12: disclosed

References

https://otrs.com/release-notes/otrs-security-advisory-2026-13/

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.