CVE-2026-93582

{
  "etk_id": "ETK-2026-1320",
  "cve_id": "CVE-2026-93582",
  "display_id": "CVE-2026-93582",
  "ghsa_id": "GHSA-prj2-j7v3-mhcv",
  "euvd_id": "EUVD-2026-97258",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Remote-user header authentication bypass in OTRS",
  "summary": "((OTRS)) Community Edition 6 and earlier can trust a request-derived remote-user value as an authenticated identity when HTTP Basic Authentication is configured. An unauthenticated attacker may impersonate an existing agent or customer account and act with that account's permissions. Exposure requires a CGI or mod_perl deployment that maps client-controlled headers into HTTP_* environment variables.",
  "mitigation": "Upgrade or migrate to OTRS 7 or later. Until then, disable HTTP Basic Authentication as the OTRS authentication backend or configure the web server so client-supplied Remote-User headers cannot be passed to the application as HTTP_REMOTE_USER.",
  "vendor": "OTRS GmbH (former OTRS AG)",
  "product": "OTRS",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "OTRS",
      "purl": null
    },
    {
      "affected_notes": [],
      "affected_ranges": [
        "6.x"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "((OTRS)) Community Edition",
      "purl": null
    }
  ],
  "cwes": [
    290
  ],
  "cvss_score": 9.4,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
  "epss_score": 0.0039,
  "epss_percentile": 0.3185,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 47.34519195,
  "t0_at": "2026-10-12T06:49:38.903000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-12T06:49:38.903000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-12T06:49:38.903000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93582"
    }
  }
}