Handesk vulnerabilities

2 known vulnerabilities in Handesk from BadChoice. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Handesk: Improper Access Control

  CVE-2026-72595Aug 11, 2026BadChoice

  A broken access control vulnerability in BadChoice Handesk as of 2026-07-10 allows any authenticated agent to update ticket records belonging to other teams via the TicketsController@update endpoint. The endpoint calls no authorize() method and performs no tea

• 8.1 High severity

  Handesk: Improper Access Control

  CVE-2026-72563Aug 11, 2026BadChoice

  A broken access control vulnerability in BadChoice Handesk as of 2026-07-10 allows any authenticated agent to overwrite lead records belonging to other teams via the LeadsController@update endpoint. The endpoint performs no authorization check, and the Lead mo