Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: FaveoSuite Clear all filters
TI-2026-86085 CVE-2026-124025 · GHSA-p5r3-pjjx-rggv

Broken access control in Faveo Helpdesk exposes other departments' tickets

Priority LOW 24

Faveo Helpdesk through 2.0.3 contains a broken access control vulnerability in TicketController::ticket_print and the pdfThread endpoint that fails to verify ticket department or assignment.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00277 Published 2026-11-06 No fix listed CWE-639
TI-2026-75462 CVE-2026-111676 · GHSA-8f6x-fr2m-f6wc

Faveo Helpdesk lets agents read tickets in other departments

Priority LOW 24

Faveo Helpdesk through 2.0.3 contains a broken access control vulnerability that allows authenticated agents to read tickets in other departments via the getTooltip handler.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00251 Published 2026-10-16 No fix listed CWE-639