Weak Password Recovery in FaveoSuite Faveo Helpdesk Affects User Security
CVE-2026-115973

6.9MEDIUM

Key Information:

Vendor

Faveosuite

Status
Faveo Helpdesk
Vendor
CVE Published:
24 October 2026

What is CVE-2026-115973?

A vulnerability exists in the Faveo Helpdesk software, specifically within the ForgotPasswordController and PasswordController functionality. This flaw permits an attacker to exploit the password recovery process, leading to insecure password reset mechanisms. The issue allows remote attackers to potentially gain unauthorized access to user accounts. The vendor was notified promptly regarding this security concern.

Affected Version(s)

Faveo Helpdesk 2.0.3

References

https://vuldb.com/vuln/426054
vdb-entrytechnical-description
https://vuldb.com/vuln/426054/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-115973
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ibrohimm (VulDB User)
VulDB CNA Team
.