CVE-2026-78435

CVE

Threat entity extracted from intelligence sources

Frequency

4

occurrences

First Seen

August 25, 2026

Last Seen

August 26, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerabilities CVE-2026-79657 and CVE-2026-78568 Disclosed74.0

Two critical vulnerabilities, CVE-2026-79657 and CVE-2026-78568, were published on August 25, 2026, with CVSS scores of 9.80 and 9.30 respectively. Both vulnerabilities allow remote access with low complexity and no user interaction required, impacting confidentiality, integrity, and availability. T...

Path Traversal Vulnerability in Faveo Helpdesk Disclosed57.1

A path traversal vulnerability (CVE-2026-78435) has been identified in Faveo Helpdesk versions up to 2.0.3, affecting the unlink function in app/Http/Controllers/Admin/helpdesk/SettingsController.php. This vulnerability allows remote attackers to manipulate the data1 parameter, potentially deleting...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (2)

Critical Vulnerabilities CVE-2026-79657 and CVE-2026-78568 Disclosed

Aug 26·0 sources

Path Traversal Vulnerability in Faveo Helpdesk Disclosed

Aug 26·1 sources

Related Articles (4)

CVE-2026-78435 - Faveo Helpdesk Logo SettingsController.php unlink path traversal Latest Vulnerabilities / 1d CVE ID : CVE-2026-78435 Published : Aug. 24, 2026, 10:17 p.m. 2 hours, 20 minutes ago Description : A vulnerability has been found in Faveo Helpdesk up to 2.0.3. Affected is the function unlink of the file app/Http/Controllers/Admin/helpdesk/SettingsController.php of the component Logo Handler. Such manipulation of the argument data1 leads to path traversal. The attack can be launched re

cvefeed.io·Aug 26

CVE-2026-78435 INCIBE-CERT - Vulnerabilities RSS / 1d Gravedad 3.1 (CVSS 3.1 Base Score) A vulnerability has been found in Faveo Helpdesk up to 2.0.3.

www.incibe.es·Aug 26

Faveo Helpdesk Logo SettingsController.php unlink path traversalA vulnerabili... CVE: New / 22h The project was informed of the problem early through an issue report but has not responded yet. Affected is the function unlink of the file app/Http/Controllers/Admin/helpdesk/SettingsController.php of the component Logo Handler.

cve.threatint.com·Aug 26

CVE-2026-78435 - Exploits & Severity

Related Entities

CWE-22 - Path Traversal T1190 - Exploit Public-Facing Application Faveo Helpdesk Path Traversal