CVE Intelligence

Faveosuite vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Faveosuite products: 1 record(s), with severity, exploitation and fixes.

Faveo-helpdesk 1

Exploited only (KEV) →

CVE-2026-111676 Medium · 4.3 CWE-639 Oct 16, 2026
Faveo Helpdesk through 2.0.3 Broken Access Control via /ticket/tooltip Endpoint
Faveo Helpdesk through 2.0.3 contains a broken access control vulnerability that allows authenticated agents to read tickets in other departments via the getTooltip handler. Attackers can enumerate sequential ticketid values on GET /ticket/tooltip to read ticket conversations, including customer personal data and internal agent notes.