VulnSocial

CVE-2026-92805PoC

LOWCVSS 9.3 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

UVdesk Community Skeleton through 1.1.8 fails to authenticate or validate installation state on wizard endpoints in ConfigureHelpdesk controller actions. Unauthenticated attackers can repoint the database and create super administrator accounts by submitting crafted requests to wizard endpoints, gaining full control of the instance.

Back to dashboard
1.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-306

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-09-17); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-09-17: 2Mentions · 2026-09-25: 1PoC Mentioned / Linked · 2026-09-17: 1PoC Mentioned / Linked · 2026-09-25: 1Technical Details · 2026-09-17: 2Technical Details · 2026-09-25: 109-1709-25
Signal classification2 categories
PoC
266.7%
Disclosure
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-09-172
Disclosure1PoC1
2026-09-251
PoC1
Full discourse3 posts
  • Ryx@PadhiyarRushi
    PoC

    UVdesk installer wizard never turns off. Unauth request creates a super-admin!! CVE-2026-92805 (CVSS 9.8 / 9.3): Community Skeleton ≤1.1.8. "ConfigureHelpdesk" wizard routes in "routes.yaml" skip auth and installation-state checks. Attacker repoints the database and plants a super administrator. Full instance takeover. Public PoC indexed this week. https://www.vulncheck.com/advisories/uvdesk-community-skeleton-through-1.1.8-missing-authentication-on-the-installation-wizard #Cybersecurity #AI #AISecurity #MCP #Claude #GPT #Infosec #Trending #AppSec #AuthBypass #RCE

    Post summary

    The text announces a critical authentication bypass in UVdesk and highlights that a public Proof of Concept (PoC) for the vulnerability has been indexed.

    04093403
    954 followersView on X
  • Rıdvan Yağlı@ridvanyagli
    PoC

    UVdesk Community Skeleton'daki CVE-2026-92805 açığı için, kimlik doğrulaması gerektirmeden DATABASE_URL değerinin değiştirilmesini ve ROLE_SUPER_ADMIN yetkili kullanıcı oluşturulmasını gösteren PoC yayınlandı. https://github.com/cflowsec/CVE-2026-92805

    Post summary

    A proof-of-concept exploit for CVE-2026-92805 in UVdesk Community Skeleton has been released, showing unauthenticated DATABASE_URL modification and creation of a super-admin user. The PoC code is available via the linked GitHub repository.

    01051288
    2.5K followersView on X
  • Rıdvan Yağlı@ridvanyagli
    Disclosure

    🔴 UVdesk'te CVSS 9.8 kritik güvenlik açığı! UVdesk Community Skeleton'da kimlik doğrulama gerektirmeyen kritik bir güvenlik açığı tespit edildi. CVE-2026-92805, kurulum sihirbazındaki endpoint'lerde kimlik doğrulama ve kurulum durumu kontrollerinin eksik olmasından kaynaklanıyor. Saldırganlar özel hazırlanmış isteklerle veritabanını yeniden yönlendirebilir ve Super Administrator hesabı oluşturabilir. Bu durum sunucudaki UVdesk instance'ının tamamen ele geçirilmesine yol açabilir. ⚠️ Etkilenen: 1.1.8 ve öncesi 🔑 Kimlik doğrulama: Gerekmiyor Bu açık için şu an düzeltilmiş bir sürüm yok! İlgili kayıt: https://github.com/uvdesk/community-skeleton/issues/926

    Post summary

    The text discloses a critical authentication bypass vulnerability (CVE-2026-92805) in UVdesk Community Skeleton v1.1.8 and prior, allowing unauthenticated attackers to achieve full system compromise via the setup wizard, with no patch currently available.

    00021250
    2.5K followersView on X

Explore more

Back to dashboard