faveo-helpdesk vulnerabilities

CVEs whose affected-version data names the faveo-helpdesk package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111676Medium· 4.3

yesterday

Faveo Helpdesk through 2.0.3 Broken Access Control via /ticket/tooltip Endpoint

Faveo Helpdesk through 2.0.3 contains a broken access control vulnerability that allows authenticated agents to read tickets in other departments via the getTooltip handler. Attackers can enumerate sequential ticketid values on GET /tick…

▾ Sunlitfaveosuite · faveo-helpdeskvia CVEORG