What’s Vulnerable › Products

uvdesk community-skeleton vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your uvdesk community-skeleton version is affected

Latest uvdesk community-skeleton vulnerabilities

• CVE-2026-105029 — UVdesk support-center-bundle before 1.1.3.3 IDOR via rateTicket Ticket Rating Endpoint (CVSS 4.3)
• CVE-2025-71421 — UVdesk core-framework before 1.1.7 Privilege Escalation via editAgent (CVSS 7.2)
• CVE-2025-71420 — UVdesk core-framework before 1.1.7 Authorization Bypass via Saved Reply (CVSS 4.3)
• CVE-2025-71419 — UVdesk core-framework before 1.1.7 Stored XSS via SwiftMailer (CVSS 5.4)
• CVE-2026-92805 — UVdesk Community Skeleton through 1.1.8 Missing Authentication on the Installation Wizard (CVSS 9.8)
• CVE-2024-3137 — Improper Privilege Management in uvdesk/community-skeleton (CVSS 7.1)
• CVE-2023-37635 — (CVSS 9.8)
• CVE-2023-0325 — (CVSS 6.1)
• CVE-2023-0265 — (CVSS 8.8)
• CVE-2023-1197 — Cross-site Scripting (XSS) - Stored in uvdesk/community-skeleton (CVSS 4.8)