Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Helpdesk — Vulnerabilities & Security Advisories 17

All 17 CVE vulnerabilities found in Helpdesk, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities associated with the product Helpdesk, categorized by vendor, product, weakness type, and tag. It collects reported issues such as injection flaws, authentication failures, and data exposure incidents, covering historical advisories from the last five years. Users can track specific vendor advisories, analyze the frequency and impact of particular weakness classes, and review the complete vulnerability history for this product. The data is structured to support trend analysis and risk assessment without requiring users to parse raw advisory texts individually.

Vendor: QNAP Systems Inc.

CVE ID Title CVSS Severity Published
CVE-2026-78435 Faveo Helpdesk Logo SettingsController.php unlink path traversal CWE-22 3.8 Low 2026-08-24
CVE-2026-78434 Faveo Helpdesk post-ticket-reply Endpoint FormController.php post_ticket_reply missing authentication CWE-306 6.5 Medium 2026-08-24
CVE-2026-23753 GFI HelpDesk < 4.99.9 Stored XSS via charset Parameter CWE-79 4.8 Medium 2026-04-20
CVE-2026-23752 GFI HelpDesk < 4.99.9 Stored XSS via companyname Parameter CWE-79 4.8 Medium 2026-04-20
CVE-2026-23756 GFI HelpDesk < 4.99.9 Stored XSS via Troubleshooter Step Subject CWE-79 5.4 Medium 2026-04-20
CVE-2026-23758 GFI HelpDesk < 4.99.9 Stored XSS via editsubject Parameter CWE-79 6.4 Medium 2026-04-20
CVE-2026-23757 GFI HelpDesk < 4.99.10 Stored XSS via Reports Module CWE-79 5.4 Medium 2026-04-20
CVE-2024-58343 Vision Helpdesk 安全漏洞 CWE-425 4.3 Medium 2026-04-16
CVE-2024-50394 Helpdesk CWE-295 7.4 - 2025-03-07
CVE-2024-27125 Helpdesk CWE-79 3.5 Low 2024-09-06
CVE-2021-28814 Improper Access Control Vulnerability in Helpdesk CWE-269 8.8 High 2021-06-11
CVE-2020-2506 improper access control vulnerability in Helpdesk CWE-284 7.3 High 2021-02-03
CVE-2020-2507 command injection vulnerability in Helpdesk CWE-77 9.8 Critical 2021-02-03
CVE-2018-19946 QNAP Systems TS-870 安全漏洞 CWE-295 4.2 Medium 2020-09-11
CVE-2018-19947 QNAP Systems TS-870 安全漏洞 CWE-200 4.3 Medium 2020-09-11
CVE-2018-19948 QNAP Systems TS-870 跨站请求伪造漏洞 CWE-352 2.0 Low 2020-09-11
CVE-2020-2500 QNAP Systems Helpdesk 信任管理问题漏洞 CWE-284 9.8 Critical 2020-07-01

All 17 known CVE vulnerabilities affecting Helpdesk with full Chinese analysis, references, and POCs where available.