Authorization Flaw in Faveo Helpdesk by FaveoSuite
CVE-2026-115972

6.9MEDIUM

Key Information:

Vendor

Faveosuite

Status
Faveo Helpdesk
Vendor
CVE Published:
24 October 2026

What is CVE-2026-115972?

An authorization vulnerability exists in the Faveo Helpdesk application, specifically within the UnAuthController functionalities, such as changeStatus, close, open, and resolve. This flaw allows an attacker to manipulate the id or status arguments, potentially resulting in unauthorized access to restricted features. The vulnerability can be exploited remotely, making it crucial for users to evaluate their security measures. The vendor has been made aware of this issue and can provide further details for remediation.

Affected Version(s)

Faveo Helpdesk 2.0.0

Faveo Helpdesk 2.0.1

Faveo Helpdesk 2.0.2

References

https://vuldb.com/vuln/426053
vdb-entrytechnical-description
https://vuldb.com/vuln/426053/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-115972
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ibrohimm (VulDB User)
VulDB CNA Team
.