Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-115973

FaveoSuite Faveo Helpdesk ForgotPasswordController.php reset password recovery

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the function ForgotPasswordController::sendResetLinkEmail/PasswordController::reset of the file app/Http/Controllers/Auth/ForgotPasswordController.php. The manipulation leads to weak password recovery. The attack may be initiated remotely. The vendor was contacted early about this disclosure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FaveoSuite Faveo Helpdesk

  • 2.0.3affected

References