CVE-2026-78355 | OTRS GmbH up to 2026.X Send Support Bundle SendSupportBundle path traversal

October 12, 2026 Yanac

A vulnerability was found in OTRS GmbH OTRS up to 2026.X and classified as problematic. The affected element is the function SendSupportBundle of the component Send Support Bundle. Such manipulation leads to path traversal.

This vulnerability is referenced as CVE-2026-78355. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More