{"id":79118,"date":"2026-06-01T07:46:22","date_gmt":"2026-06-01T04:16:22","guid":{"rendered":"https:\/\/afaghhosting.net\/blog\/cve-2026-48191-wrong-permission-handling-in-document-search-article-meta-filters\/"},"modified":"2026-06-01T07:46:22","modified_gmt":"2026-06-01T04:16:22","slug":"cve-2026-48191-wrong-permission-handling-in-document-search-article-meta-filters","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/cve-2026-48191-wrong-permission-handling-in-document-search-article-meta-filters\/","title":{"rendered":"CVE-2026-48191 &#8211; Wrong Permission Handling in Document Search Article Meta Filters"},"content":{"rendered":"<p>CVE ID :CVE-2026-48191<\/p>\n<p>  Published : June 1, 2026, 4:16 a.m. | 16\u00a0minutes ago<\/p>\n<p>  Description :An incorrect handling of permissions in STORM powered by OTRS and in OTRS (2026.x and above) Document Search Article Meta Filters modules allows gaining knowledge about number of affected CIs, SLA and services without gaining access to them.<\/p>\n<p>This issue affects OTRS with STORM modules: <\/p>\n<p>  *  7.0.X<br \/>\n  *  8.0.X<br \/>\n  *  2023.X<br \/>\n  *  2024.X<br \/>\n  *  2025.X<br \/>\n  *  2026.X before 2026.4.X<\/p>\n<p>  Severity: 3.5 | LOW<\/p>\n<p>  Visit the link for more details, such as CVSS details, affected products, timeline, and more&#8230;\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CVE ID :CVE-2026-48191 Published : June 1, 2026, 4:16 a.m. | 16\u00a0minutes ago Description :An incorrect handling of permissions in STORM powered by OTRS and in OTRS (2026.x and above) Document Search Article Meta Filters modules allows gaining knowledge about number of affected CIs, SLA and services without gaining access to them. This issue affects &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-79118","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/79118","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=79118"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/79118\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=79118"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=79118"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=79118"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}