THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-92805 (CRITICAL 9.8) — UVdesk Community Skeleton through 1.1.8 fails to authenticate or validate installation state on wizard endpoints in ConfigureHelpdesk controller actions. Unauthenticated attackers can repoint the database and create super administrator accounts by submitting crafted requests to w

[NVD] CVE-2026-92805 (CRITICAL 9.8) — UVdesk Community Skeleton through 1.1.8 fails to authenticate or validate installation state on wizard endpoints in ConfigureHelpdesk controller actions. Unauthenticated attackers can repoint the database and create super administrator accounts by submitting crafted requests to w

mednvdPublished 2026-09-16

CVE-2026-92805 CVSS: 9.8 CRITICAL Published: 2026-09-16T21:17:30.267

UVdesk Community Skeleton through 1.1.8 fails to authenticate or validate installation state on wizard endpoints in ConfigureHelpdesk controller actions. Unauthenticated attackers can repoint the database and create super administrator accounts by submitting crafted requests to wizard endpoints, gaining full control of the insta

Indicators of compromise

CVE-2026-92805cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-92805