CVE-2026-23756Disclosure(gfi / helpdesk)

LOWCVSS 5.1 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the Troubleshooter module where the subject POST parameter is not sanitized in Controller_Step.InsertSubmit() and EditSubmit() before being rendered by View_Step.RenderViewSteps(). An authenticated staff member can inject arbitrary JavaScript into the step subject field, and the payload executes when any user navigates to Troubleshooter > View Troubleshooter and clicks the affected step link.

gfi CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.vulncheck.com/advisories/gfi-helpdesk-stored-xss-via-troubleshooter-step-subject

Other references

https://gfi.ai/products-and-solutions/email-and-messaging-solutions/helpdesk/resources/product-releases

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

helpdesk

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-04-20); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

gfi

Products

helpdesk

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

CVE@CVEnew170d
Disclosure
CVE-2026-23756 GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the Troubleshooter module where the subject POST parameter is not sanitized in Cont… https://www.cve.org/CVERecord?id=CVE-2026-23756
Post summary
The post announces the discovery of a stored XSS vulnerability in GFI HelpDesk versions prior to 4.99.9, detailing the affected parameter and module without providing any exploit or mitigation information.
0000092
57.2K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds171d
Disclosure
CVE-2026-23756 Stored Cross-Site Scripting in GFI HelpDesk Troubleshooter Module Before 4.99.9 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-23756
Post summary
The text announces a stored XSS vulnerability (CVE‑2026‑23756) in the GFI HelpDesk Troubleshooter module before version 4.99.9, with no PoC, exploit, or patch information provided.
0000037
4.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	gfi	helpdesk	-	-	-

Explore more

Back to dashboard gfi CVEs helpdesk vulnerabilities