Log in Start free

uvdesk

Products

ProductCVEsExploitedLatest
community-skeleton5–Oct 2, 2026
core-framework3–Sep 21, 2026
uvdesk/community-skeleton2–Apr 2, 2024
support-center-bundle1–Oct 2, 2026

Exploited and recent CVEs

  • CVE-2026-105029 Medium 4.3 UVdesk support-center-bundle before 1.1.3.3 IDOR via rateTicket Ticket Rating Endpoint 0.2%
  • CVE-2026-105029 Medium 4.3 UVdesk support-center-bundle before 1.1.3.3 IDOR via rateTicket Ticket Rating Endpoint 0.2%
  • CVE-2025-71421 High 7.2 UVdesk core-framework before 1.1.7 Privilege Escalation via editAgent 0.6%
  • CVE-2025-71421 High 7.2 UVdesk core-framework before 1.1.7 Privilege Escalation via editAgent 0.6%
  • CVE-2025-71420 Medium 4.3 UVdesk core-framework before 1.1.7 Authorization Bypass via Saved Reply 0.4%
  • CVE-2025-71420 Medium 4.3 UVdesk core-framework before 1.1.7 Authorization Bypass via Saved Reply 0.4%
  • CVE-2025-71419 Medium 5.4 UVdesk core-framework before 1.1.7 Stored XSS via SwiftMailer 0.3%
  • CVE-2025-71419 Medium 5.4 UVdesk core-framework before 1.1.7 Stored XSS via SwiftMailer 0.3%
  • CVE-2026-92805 Critical 9.8 UVdesk Community Skeleton through 1.1.8 Missing Authentication on the Installation Wizard 0.6%
  • CVE-2024-3137 High 7.1 Improper Privilege Management in uvdesk/community-skeleton 0.4%
  • CVE-2023-1197 Medium 4.3 Cross-site Scripting (XSS) - Stored in uvdesk/community-skeleton 0.4%