Exploitation ongoing with high activity in latest observed window (2 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A vulnerability in the SQL Box in the admin interface of OTRS leads to an uncontrolled resource consumption leading to a DoS against the webserver. will be killed by the systemThis issue affects OTRS: * 7.0.X * 8.0.X * 2023.X * 2024.X * 2025.X * 2026.X before 2026.3.X
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-20 | 1 | Disclosure1 |
| 2026-04-21 | 2 | Active Exploitation1Disclosure1 |
Our CTI team identified a lot of activities targeting OTRS (CVE-2026-6060) https://vuldb.com/vuln/358355/cti
Post summary
The CTI team reports that OTRS is being actively targeted in the wild for CVE-2026-6060, but no patch, PoC, or technical details are presented.
CVE-2026-6060 A vulnerability in the SQL Box in the admin interface of OTRS leads to an uncontrolled resource consumption leading to a DoS against the webserver. will be killed by th… https://www.cve.org/CVERecord?id=CVE-2026-6060
Post summary
The text identifies a DoS vulnerability in OTRS’s admin SQL box but offers only basic technical details, no PoC, exploit, patch, or active exploitation evidence.
CVE-2026-6060 Uncontrolled Resource Consumption Denial of Service in OTRS Admin Interface SQL Box https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6060
Post summary
The text announces CVE-2026-6060, describing a denial of service vulnerability in OTRS’s admin SQL interface, without providing additional exploit, patch, or PoC details.