CVE-2026-105029Published
UVdesk support-center-bundle before 1.1.3.3 IDOR via rateTicket Ticket Rating Endpoint
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-105029 · Microsoft / collected KEV context
cve-program · CVE-2026-105029
- https://github.com/uvdesk/support-center-bundle/commit/3fa884a3adf0f317f354f83a1f9fa531234a551f
- https://hackmd.io/@leediay/idor-rate-ticket_uvdesk
- https://github.com/uvdesk/support-center-bundle
- https://www.vulncheck.com/advisories/uvdesk-support-center-bundle-before-1.1.3.3-idor-via-rateticket-ticket-rating-endpoint
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.