https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 04:45:21 +0000 https://db.gcve.eu/vuln/cve-2026-111939 <p><strong>Affected:</strong> frappe helpdesk</p> <p>Frappe Helpdesk before 1.26.0 contains an authorization bypass vulnerability that allows authenticated portal users to create tickets impersonating other customers by supplying a raised_by value. Attackers can call the hd_ticket.api.new endpoint with a victim&#39;s email to plant phishing tickets in their portal and read their replies via get_ticket_activities.</p> <p><strong>Affected:</strong> frappe helpdesk</p> <p>Frappe Helpdesk before 1.26.0 contains an authorization bypass vulnerability that allows authenticated portal users to create tickets impersonating other customers by supplying a raised_by value. Attackers can call the hd_ticket.api.new endpoint with a victim&#39;s email to plant phishing tickets in their portal and read their replies via get_ticket_activities.</p> https://db.gcve.eu/vuln/cve-2026-111939