CVE Intelligence

Faveosuite Faveo-helpdesk vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Faveosuite Faveo-helpdesk: 1 record(s), with affected versions and fixes.

CVE-2026-111676 Medium · 4.3 CWE-639 Oct 16, 2026
Faveo Helpdesk through 2.0.3 Broken Access Control via /ticket/tooltip Endpoint
Faveo Helpdesk through 2.0.3 contains a broken access control vulnerability that allows authenticated agents to read tickets in other departments via the getTooltip handler. Attackers can enumerate sequential ticketid values on GET /ticket/tooltip to read ticket conversations, including customer personal data and internal agent notes.