{"schema_version":"2","view":"grouped","data":[{"id":56343,"cve_ids":["CVE-2026-115973"],"payload":{"kind":"advisory","title":"FaveoSuite Faveo Helpdesk ForgotPasswordController.php reset password recovery","summary":"A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the function ForgotPasswordController::sendResetLinkEmail/PasswordController::reset of the file app/Http/Controllers/Auth/ForgotPasswordController.php. The manipulation leads to weak password recovery. The attack may be initiated remotely. The vendor was contacted early about this disclosure.","evidence":"cve:CVE-2026-115973","products":[{"name":{"value":"Faveo Helpdesk","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-115973","aliases":["CVE-2026-115973"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X"}},{"cvssV3_1":{"version":"3.1","baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":7.5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P/E:ND/RL:ND/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:faveosuite:faveo_helpdesk:*:*:*:*:*:*:*:*"],"vendor":"FaveoSuite","product":"Faveo Helpdesk","versions":[{"status":"affected","version":"2.0.3"}]}],"modified":"2026-10-24T18:15:15.067Z","provider":"cve","references":["https://vuldb.com/vuln/426054","https://vuldb.com/vuln/426054/cti","https://vuldb.com/cve/CVE-2026-115973","https://vuldb.com/submit/986184"],"provider_metadata":{"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-10-24T18:15:15.067Z"}}},"related_cves":[{"value":"CVE-2026-115973","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:04ea419a-b3e0-4f85-8289-cca7ddb91c96","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-115973","advisory_id":"04ea419a-b3e0-4f85-8289-cca7ddb91c96","event_types":["advisory"],"published_at":"2026-10-25T16:13:06.17501+00:00","technologies":["core-cve","faveo-helpdesk"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-24T18:15:15.067+00:00","detail_url":"/advisories/advisory%3A04ea419a-b3e0-4f85-8289-cca7ddb91c96","group":{"id":"advisory:04ea419a-b3e0-4f85-8289-cca7ddb91c96","revision":1,"primary_event_id":55866,"change":"published","superseded_by":[],"changed":{"id":55866,"cve_ids":["CVE-2026-115973"],"payload":{"kind":"advisory","title":"FaveoSuite Faveo Helpdesk ForgotPasswordController.php reset password recovery","summary":"A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the function ForgotPasswordController::sendResetLinkEmail/PasswordController::reset of the file app/Http/Controllers/Auth/ForgotPasswordController.php. The manipulation leads to weak password recovery. The attack may be initiated remotely. The vendor was contacted early about this disclosure.","evidence":"cve:CVE-2026-115973","products":[{"name":{"value":"Faveo Helpdesk","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-115973","aliases":["CVE-2026-115973"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X"}},{"cvssV3_1":{"version":"3.1","baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":7.5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P/E:ND/RL:ND/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:faveosuite:faveo_helpdesk:*:*:*:*:*:*:*:*"],"vendor":"FaveoSuite","product":"Faveo Helpdesk","versions":[{"status":"affected","version":"2.0.3"}]}],"modified":"2026-10-24T18:15:15.067Z","provider":"cve","references":["https://vuldb.com/vuln/426054","https://vuldb.com/vuln/426054/cti","https://vuldb.com/cve/CVE-2026-115973","https://vuldb.com/submit/986184"],"provider_metadata":{"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-10-24T18:15:15.067Z"}}},"related_cves":[{"value":"CVE-2026-115973","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:04ea419a-b3e0-4f85-8289-cca7ddb91c96","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-115973","advisory_id":"04ea419a-b3e0-4f85-8289-cca7ddb91c96","event_types":["advisory"],"published_at":"2026-10-25T16:13:06.17501+00:00","technologies":["core-cve","faveo-helpdesk"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-24T18:15:15.067+00:00","detail_url":"/events/55866"},"members":[{"id":55866,"cve_ids":["CVE-2026-115973"],"payload":{"kind":"advisory","title":"FaveoSuite Faveo Helpdesk ForgotPasswordController.php reset password recovery","summary":"A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the function ForgotPasswordController::sendResetLinkEmail/PasswordController::reset of the file app/Http/Controllers/Auth/ForgotPasswordController.php. The manipulation leads to weak password recovery. The attack may be initiated remotely. The vendor was contacted early about this disclosure.","evidence":"cve:CVE-2026-115973","products":[{"name":{"value":"Faveo Helpdesk","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-115973","aliases":["CVE-2026-115973"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X"}},{"cvssV3_1":{"version":"3.1","baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":7.5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P/E:ND/RL:ND/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:faveosuite:faveo_helpdesk:*:*:*:*:*:*:*:*"],"vendor":"FaveoSuite","product":"Faveo Helpdesk","versions":[{"status":"affected","version":"2.0.3"}]}],"modified":"2026-10-24T18:15:15.067Z","provider":"cve","references":["https://vuldb.com/vuln/426054","https://vuldb.com/vuln/426054/cti","https://vuldb.com/cve/CVE-2026-115973","https://vuldb.com/submit/986184"],"provider_metadata":{"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-10-24T18:15:15.067Z"}}},"related_cves":[{"value":"CVE-2026-115973","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:04ea419a-b3e0-4f85-8289-cca7ddb91c96","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-115973","advisory_id":"04ea419a-b3e0-4f85-8289-cca7ddb91c96","event_types":["advisory"],"published_at":"2026-10-25T16:13:06.17501+00:00","technologies":["core-cve","faveo-helpdesk"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-24T18:15:15.067+00:00","detail_url":"/events/55866"}]}}],"next_after":56343,"next_before":56343}