CVE-2026-125387— Faveo Helpdesk through 2.0.3 Cross-Department Ticket Tampering via TicketController

Quick assessment

Copy summary Copy citation

Affected

faveosuite faveo-helpdesk

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Faveo Helpdesk 2.0.3 及更早版本中存在一个授权绕过漏洞，位于 TicketController 组件中。该漏洞允许已认证的客服代理通过直接引用原始工单 ID，修改不属于其所在部门的工单。攻击者可调用 merge-tickets、change-owner、ticket/assign 和 ticket/surrender 等接口，从而关闭、合并或重新分配其他部门的工单，并枚举客户的工单主题。

CVE-2026-125387 affects faveosuite faveo-helpdesk. No confirmed in-the-wild exploitation; assess based on exposure. Faveo Helpdesk 2.0.3 及更早版本中存在一个授权绕过漏洞，位于 TicketController 组件中。该漏洞允许已认证的客服代理通过直接引用原始工单 ID，修改不属于其所在部门的工单。攻击者可调用 merge-tickets、change-owner、ticket/assign 和 ticket/surrender 等接口，从而关闭、合 CVE-2026-125387 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2026-125387

I. Basic Information for CVE-2026-125387

Affected Products

II. Public POCs for CVE-2026-125387

III. Intelligence Information for CVE-2026-125387

Other References for CVE-2026-125387 (6)

• https://github.com/faveosuite/faveo-helpdesk product
• https://github.com/faveosuite/faveo-helpdesk/blob/v2.0.3/app/Http/Controllers/Agent/helpdesk/TicketController.php#L2230-L2300 technical-description
• https://github.com/faveosuite/faveo-helpdesk/commit/70faee621b5c3c88a34e79ad2eb1f0be17e63078 patch
• https://github.com/faveosuite/faveo-helpdesk/commit/487a2c33912d701fc04bdb857775fea122ce20d1 patch
• https://github.com/faveosuite/faveo-helpdesk/issues/8368 issue-tracking
• https://www.vulncheck.com/advisories/faveo-helpdesk-through-2.0.3-cross-department-ticket-tampering-via-ticketcontroller third-party-advisory

• https://www.cve.org/CVERecord?id=CVE-2026-125387

IV. Related Vulnerabilities