Skip to content
OpenAdvisories

Vendor

BadChoice

2 known vulnerabilities.

Products

Handesk 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-72595

    BadChoice Handesk - Broken Access Control

    A broken access control vulnerability in BadChoice Handesk as of 2026-07-10 allows any authenticated agent to update ticket records belonging to other teams via the TicketsController@update endpoint. The endpoint calls no authorize() method and performs no te…

    BadChoice Handesk
  • High 8.1
    CVE-2026-72563

    BadChoice Handesk - Broken Access Control

    A broken access control vulnerability in BadChoice Handesk as of 2026-07-10 allows any authenticated agent to overwrite lead records belonging to other teams via the LeadsController@update endpoint. The endpoint performs no authorization check, and the Lead m…

    BadChoice Handesk