Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-124025— Faveo Helpdesk through 2.0.3 Cross-Department Ticket Disclosure via /ticket/print

Quick assessment

Affected

faveosuite faveo-helpdesk

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Faveo Helpdesk 2.0.3 及以下版本存在访问控制缺陷漏洞。该漏洞位于方法和端点，因未对工单的所属部门或分配情况进行验证，导致经过认证的客服人员可通过 GET 请求指定任意工单 ID，从而渲染并获取其他部门工单的 PDF 文件，包括完整的对话线程内容。

CVSS 4.3 · Medium Updated Nov 07, 2026

Possible ATT&CK Techniques 2 AI

T1557 · Adversary-in-the-Middle T1068 · Exploitation for Privilege Escalation

Affected Version Matrix 1

Vendor	Product	Version Range	Status
faveosuite	faveo-helpdesk	`≤ 2.0.3`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Faveo Helpdesk through 2.0.3 Cross-Department Ticket Disclosure via /ticket/print

Source: CVE Program / CVE List V5

Vulnerability Description

Faveo Helpdesk through 2.0.3 contains a broken access control vulnerability in TicketController::ticket_print and the pdfThread endpoint that fails to verify ticket department or assignment. Authenticated agents can request arbitrary ticket ids via GET /ticket/print/{id} to render PDFs of other departments' tickets, including full conversation threads.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

通过用户控制密钥绕过授权机制

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
faveosuite	faveo-helpdesk	0 ~ 2.0.3	-

II. Public POCs for CVE-2026-124025

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-124025

请登录查看更多情报信息。

Other References for CVE-2026-124025 (6)

https://github.com/faveosuite/faveo-helpdesk/commit/408076c7fa921133920decceec306b194affdcee patch
https://github.com/faveosuite/faveo-helpdesk product
https://github.com/faveosuite/faveo-helpdesk/blob/v2.0.3/app/Http/Controllers/Agent/helpdesk/TicketController.php#L490 technical-description
https://github.com/faveosuite/faveo-helpdesk/issues/8369 issue-tracking
https://github.com/faveosuite/faveo-helpdesk/releases/tag/v2.0.4.RC.1 release-notes
https://www.vulncheck.com/advisories/faveo-helpdesk-through-2.0.3-cross-department-ticket-disclosure-via-ticket-print third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-124025

IV. Related Vulnerabilities

Same product: faveo-helpdesk

CVE-2026-111676
Faveo Helpdesk through 2.0.3 Broken Access Control via /tick

Same vendor: faveosuite

Same weakness: CWE-639