emsuregot@emsuregot
CVE-2026-115973 - FaveoSuite Faveo Helpdesk ForgotPasswordController.php reset password recovery https://cvefeed.io/vuln/detail/CVE-2026-115973
0000020
18 followersView on X
CVE-2026-115973
LOWCVSS 6.9 · MEDIUMSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the function ForgotPasswordController::sendResetLinkEmail/PasswordController::reset of the file app/Http/Controllers/Auth/ForgotPasswordController.php. The manipulation leads to weak password recovery. The attack may be initiated remotely. The vendor was contacted early about this disclosure.
0.0/ 10 priority
Sources & remediation
Other references
Weakness type (CWE)
CWE-640
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day
Deep dive
Activity timeline1 mentions / 1d
Referenced assets1 URL
By indicator