Uvdesk vulnerabilities

Products

• Community-skeleton 10
• Core-framework 3
• Uvdesk/community-skeleton 2

Newest

• uvdesk support-center-bundle, community-skeleton +1 more UVdesk support-center-bundle before 1.1.3.3 IDOR via rateTicket Ticket Rating Endpoint CVE-2026-105029 5.3 MediumOctober 2, 2026
• uvdesk core-framework, community-skeleton +1 more UVdesk core-framework before 1.1.7 Privilege Escalation via editAgent CVE-2025-71421 8.6 HighSeptember 21, 2026
• uvdesk core-framework, community-skeleton +1 more UVdesk core-framework before 1.1.7 Authorization Bypass via Saved Reply CVE-2025-71420 5.3 MediumSeptember 21, 2026
• uvdesk core-framework, community-skeleton +1 more UVdesk core-framework before 1.1.7 Stored XSS via SwiftMailer CVE-2025-71419 5.1 MediumSeptember 21, 2026
• uvdesk community-skeleton UVdesk Community Skeleton through 1.1.8 Missing Authentication on the Installation Wizard CVE-2026-92805 9.3 CriticalSeptember 16, 2026
• uvdesk community-skeleton, uvdesk/community-skeleton +1 more Improper Privilege Management in uvdesk/community-skeleton CVE-2024-3137 7.1 HighApril 2, 2024
• uvdesk community-skeleton UVDesk Community Skeleton v1.1.1 allows unauthenticated attackers to perform brute force attacks... CVE-2023-37635 Public exploit 9.8 CriticalOctober 23, 2023
• uvdesk community-skeleton Uvdesk vulnerable to stored cross-site scripting (XSS) CVE-2023-0325 6.1 MediumApril 4, 2023
• uvdesk community-skeleton Uvdesk remote code execution vulnerability CVE-2023-0265 8.8 HighApril 4, 2023
• uvdesk community-skeleton, uvdesk/community-skeleton +1 more Cross-site Scripting (XSS) - Stored in uvdesk/community-skeleton CVE-2023-1197 Fix available 4.3 MediumMarch 6, 2023