CVE-2026-115973 | FaveoSuite Faveo Helpdesk 2.0.3 ForgotPasswordController.php reset password recovery

October 24, 2026 Yanac

A vulnerability was found in FaveoSuite Faveo Helpdesk 2.0.3. It has been classified as critical. Affected by this issue is the function ForgotPasswordController::sendResetLinkEmail/PasswordController::reset of the file app/Http/Controllers/Auth/ForgotPasswordController.php. The manipulation leads to weak password recovery.

This vulnerability is listed as CVE-2026-115973. The attack may be initiated remotely. There is no available exploit.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More