Vulnerabilities and Security Researches

SupportCandy – Helpdesk & Customer Support Ticket System, CVE-2026-54826

CVE, Research URL: CVE-2026-54826
Home page URL: Security reports for SupportCandy – Helpdesk & Customer Support Ticket System
Application: SupportCandy – Helpdesk & Customer Support Ticket System
Published on: Jun 26, 2026
Research Description: Subscriber Insecure Direct Object References (IDOR) in SupportCandy <= 3.4.6 versions.
Affected versions: max 3.4.7.
Status: vulnerable