MEDIUM 6.9 NVD
CVE-2026-115972
A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this vulnerability is the function UnAuthController.changeStatus/UnAuthCont
A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this vulnerability is the function UnAuthController.changeStatus/UnAuthController.close/UnAuthController.open/UnAuthController.resolve of the file app/Http/Controllers/Client/helpdesk/UnAuthController.php. Executing a manipulation of the argument id/status can lead to missing authorization. The attack can be launched remotely. The vendor was contacted early about this disclosure.
References
- https://vuldb.com/cve/CVE-2026-115972
- https://vuldb.com/submit/986183
- https://vuldb.com/vuln/426053
- https://vuldb.com/vuln/426053/cti
This medium severity vulnerability with a CVSS score of 6.9 was published on 2026-10-24 via NVD.
vulnfeed aggregates 15912 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.