Live › vulnerability › CVE-2026-111676
Go to dashboardFaveo Helpdesk through 2.0.3 has a broken access control flaw in its getTooltip handler, so any logged-in agent can read tickets belonging to other departments. An attacker who holds an agent account can enumerate sequential ticket IDs on GET /ticket/tooltip and read conversations, customer personal data and internal agent notes.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Self-hosted Faveo Helpdesk installs at version 2.0.3 or earlier with multiple agent accounts spread across departments. Exposure depends on agents in one department being able to reach tickets owned by another; a single-department install has less to lose. Teams on a hosted Faveo service should wait for the vendor's notice.
No product ranges from the sources yet.
2.0.3 or earlier/ticket/tooltip with sequential ticketid values from a single agent accountUnknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Faveo Helpdesk through 2.0.3 contains a broken access control vulnerability that allows authenticated agents to read tickets in other departments via the getTooltip handler. Attackers can enumerate sequential ticketid values on GET /ticket/tooltip to read ticket conversations, including customer personal data and internal agent notes.
This page as .md · .json · in your agent: get_signal("CVE-2026-111676")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.