Skip to content
OpenAdvisories

Product · Frappe Technologies

helpdesk

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.6
    CVE-2026-111939

    Frappe Helpdesk before 1.26.0 Authorization Bypass via raised_by in Ticket Creation

    Frappe Helpdesk before 1.26.0 contains an authorization bypass vulnerability that allows authenticated portal users to create tickets impersonating other customers by supplying a raised_by value. Attackers can call the hd_ticket.api.new endpoint with a victim…

    Frappe Technologies helpdesk