Skip to content
OpenAdvisories

Vendor

uvdesk

7 known vulnerabilities.

Products

community-skeleton 5 core-framework 3 uvdesk/community-skeleton 2 support-center-bundle 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-92805

    UVdesk Community Skeleton through 1.1.8 Missing Authentication on the Installation Wizard

    UVdesk Community Skeleton through 1.1.8 fails to authenticate or validate installation state on wizard endpoints in ConfigureHelpdesk controller actions. Unauthenticated attackers can repoint the database and create super administrator accounts by submitting …

    uvdesk community-skeleton