Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

uvdesk vulnerabilities

7 published CVEs name uvdesk among the affected products.

Published CVEs
7
Last 12 months
5
Critical
1
Known exploited
0

Critical 1High 2Medium 4Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20231
  2. 20241
  3. 20265

Newest CVEs

  • CVE-2026-105029

    UVdesk support-center-bundle before 1.1.3.3 IDOR via rateTicket Ticket Rating Endpoint

    uvdesk · support-center-bundle

    Medium5.3
  • CVE-2025-71421

    UVdesk core-framework before 1.1.7 Privilege Escalation via editAgent

    uvdesk · core-framework

    High8.6
  • CVE-2025-71420

    UVdesk core-framework before 1.1.7 Authorization Bypass via Saved Reply

    uvdesk · core-framework

    Medium5.3
  • CVE-2025-71419

    UVdesk core-framework before 1.1.7 Stored XSS via SwiftMailer

    uvdesk · core-framework

    Medium5.1
  • CVE-2026-92805

    UVdesk Community Skeleton through 1.1.8 Missing Authentication on the Installation Wizard

    uvdesk · community-skeleton

    Critical9.3
  • CVE-2024-3137

    Improper Privilege Management in uvdesk/community-skeleton

    uvdesk · uvdesk/community-skeleton

    High7.1
  • CVE-2023-1197

    Cross-site Scripting (XSS) - Stored in uvdesk/community-skeleton

    uvdesk · uvdesk/community-skeleton

    Medium4.3