Read the docs

FaveoSuite

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

FaveoSuite records in CISA KEV

No FaveoSuite vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-86085 CVE-2026-124025 · GHSA-p5r3-pjjx-rggv

Broken access control in Faveo Helpdesk exposes other departments' tickets

Priority LOW 24

Faveo Helpdesk through 2.0.3 contains a broken access control vulnerability in TicketController::ticket_print and the pdfThread endpoint that fails to verify ticket department or assignment.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00277 Published 2026-11-06 No fix listed CWE-639
TI-2026-75462 CVE-2026-111676 · GHSA-8f6x-fr2m-f6wc

Faveo Helpdesk lets agents read tickets in other departments

Priority LOW 24

Faveo Helpdesk through 2.0.3 contains a broken access control vulnerability that allows authenticated agents to read tickets in other departments via the getTooltip handler.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00251 Published 2026-10-16 No fix listed CWE-639
Open these records in search →