Threats affecting pkg:github/uvdesk/community-skeleton

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 0.6%	CVE-2026-92805uvdesk community-skeleton · Missing Authentication Critical9.3EPSS 0.6%2026-09-16CVE Database V5CVE-2026-92805 UVdesk Community Skeleton through 1.1.8 fails to authenticate or validate installation state on wizard endpoints in ConfigureHelpdesk controller actions. Unauthenticated attackers can repoint the database and create super administrator accounts by submitting crafted requests to wizard endpoints, gaining full control of the instance. EPSS 0.6%Vulnerability #ghsa-jhv5-73fw-76g2	CVE Database V5	2026-09-16

Page 1 of 1