{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3afaveosuitefaveo_helpdesk_2_0_3/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:faveosuite:faveo_helpdesk_2_0_3:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.3,"id":"CVE-2026-115973"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Faveo Helpdesk 2.0.3"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["FaveoSuite"],"content_html":"\u003cp\u003eA vulnerability (CVE-2026-115973) has been identified in Faveo Helpdesk 2.0.3. The issue involves the \u003ccode\u003eForgotPasswordController::sendResetLinkEmail\u003c/code\u003e and \u003ccode\u003ePasswordController::reset\u003c/code\u003e functions within \u003ccode\u003eapp/Http/Controllers/Auth/ForgotPasswordController.php\u003c/code\u003e. This manipulation results in weak password recovery and can be initiated remotely. The vendor was contacted early about this disclosure.\u003c/p\u003e\n","date_modified":"2026-10-24T20:17:47Z","date_published":"2026-10-24T20:17:47Z","id":"https://feed.craftedsignal.io/briefs/2026-10-faveo-helpdesk-password-reset/","summary":"A vulnerability in Faveo Helpdesk 2.0.3 allows for remote manipulation of password recovery functions.","title":"Faveo Helpdesk: Weak password recovery (CVE-2026-115973)","url":"https://feed.craftedsignal.io/briefs/2026-10-faveo-helpdesk-password-reset/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:faveosuite:faveo_helpdesk_2_0_3:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}