CVE-2026-48887

MediumCVSS 6.5

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

14th percentile - higher than 14% of all known CVEs

JS Help Desk versions up to 3.0.9 contain a vulnerability in access control that allows unauthorized access to resources.

Organizations may be exposed to unauthorized access to sensitive data, potentially leading to a loss of confidentiality.

It is recommended to upgrade to the latest version of JS Help Desk to mitigate this security vulnerability.

Original NVD description (English source)

Unauthenticated Broken Access Control in JS Help Desk <= 3.0.9 versions.