Vulnerability · Published Jul 16, 2026 · Assigned by VulnCheck

CVE-2026-63082Perfect Support Ticketing System 1.7 Broken Access Control via Agent Assignment

Medium 5.4

In plain English

A medium-severity missing authorization in Perfect Support Ticketing & Document Management System from Ultimate Fosters. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).

Severity (CVSS 3.1)5.4Medium

Exploit odds (30 days)0.3%top 82.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Perfect Support Ticketing & Document Management System through 1.7 contains a broken access control vulnerability that allows authenticated attackers with Agent-level privileges to manipulate the Support Agent assignment field of tickets by bypassing intended authorization checks. Attackers can add or remove any user, including Superadmin accounts, from the Support Agent field of any ticket to which they are assigned, circumventing role-based access controls.

Affected products (as reported)

Vendor	Product	Versions
Ultimate Fosters	Perfect Support Ticketing & Document Management System	0 – through 1.7

Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

References

Researcher Disclosure technical-description, exploit
https://www.vulncheck.com/advisories/perfect-support-ticketing-system-broken-access-control-via-agent-assignment third-party-advisory