CVE-2026-111939 | Frappe Helpdesk up to 1.25.x Create Ticket hd_ticket.api.new raised_by authorization

October 19, 2026 Yanac

A vulnerability was found in Frappe Helpdesk up to 1.25.x. It has been rated as critical. The affected element is an unknown function of the file hd_ticket.api.new of the component Create Ticket. Performing a manipulation of the argument raised_by results in authorization bypass.

This vulnerability was named CVE-2026-111939. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More