core-framework vulnerabilities

1 known vulnerability in core-framework from Uvdesk. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  core-framework: Improper Privilege Management

  CVE-2025-71421Sep 21, 2026Uvdesk

  UVdesk core-framework before 1.1.7 contains an improper privilege management vulnerability in the editAgent endpoint that allows agents with agent-management privilege to escalate their own role to administrator. Attackers can submit their own account identifi