faveo vulnerabilities

Products

• helpdesk 2

Latest faveo CVEs

Newest publication first

1. CVE-2026-78435 Faveo Helpdesk Logo SettingsController.php unlink path traversal

   Published 2026-08-24

   Medium·CVSS 5.1 EPSS 0.51%

   A vulnerability has been found in Faveo Helpdesk up to 2.0.3. Affected is the function unlink of the file app/Http/Controllers/Admin/helpdesk/SettingsController.php of the component Logo Handler. Such manipulation of the argument data1 leads to path traversal. The attack can be l...

2. CVE-2026-78434 Faveo Helpdesk post-ticket-reply Endpoint FormController.php post_ticket_reply missing authentication

   Published 2026-08-24

   Medium·CVSS 6.9 EPSS 0.72%

   A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController::post_ticket_reply of the file app/Http/Controllers/Client/helpdesk/FormController.php of the component post-ticket-reply Endpoint. This manipulation causes missing authentication. The a...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.