PT-2026-96098

UVdesk core-framework before 1.1.7 contains an authorization bypass vulnerability in the saved reply endpoint that allows authenticated agents to access replies restricted to other support groups. Attackers with ROLE AGENT can enumerate saved reply identifiers and read content reserved for groups...

PT-2026-96097

UVdesk core-framework before 1.1.7 contains a stored cross-site scripting vulnerability in the SwiftMailer configuration identifier parameter of the createMailerConfiguration action. Attackers with ROLE AGENT can inject malicious script into the identifier field, which is persisted and executed...