CVE-2026-115972Medium· 5.3▾ SunlitA vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this vulnerability is the function UnAuthController.changeStatus/UnAuthController.close/UnAuthController.open/UnAuthController.resolve of the file app/H…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this vulnerability is the function UnAuthController.changeStatus/UnAuthController.close/UnAuthController.open/UnAuthController.resolve of the file app/Http/Controllers/Client/helpdesk/UnAuthController.php. Executing a manipulation of the argument id/status can lead to missing authorization. The attack can be launched remotely. The vendor was contacted early about this disclosure.
faveo_helpdesk 2.0.0faveo_helpdesk 2.0.1faveo_helpdesk 2.0.2faveo_helpdesk 2.0.3Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-115973High· 7.3FaveoSuite Faveo Helpdesk ForgotPasswordController.php reset password recovery
CVE-2025-12924Medium· 4.3A vulnerability was identified in rymcu forest up to de53ce79db9faa2efc4e79ce1077a302c42a1224
CVE-2026-111676Medium· 4.3Faveo Helpdesk through 2.0.3 Broken Access Control via /ticket/tooltip Endpoint
CVE-2025-11439Medium· 4.3A vulnerability was found in JhumanJ OpnForm up to 1.9.3
CVE-2025-11438Medium· 6.3A vulnerability has been found in JhumanJ OpnForm up to 1.9.3
CVE-2025-15406Medium· 6.3A flaw has been found in PHPGurukul Online Course Registration up to 3.1