CVE-2026-63082

MEDIUM 5.4

Perfect Support Ticketing System 1.7 Broken Access Control via Agent Assignment

CVSS Score

5.4

EPSS Score

0.0%

EPSS Percentile

0th

Perfect Support Ticketing & Document Management System through 1.7 contains a broken access control vulnerability that allows authenticated attackers with Agent-level privileges to manipulate the Support Agent assignment field of tickets by bypassing intended authorization checks. Attackers can add or remove any user, including Superadmin accounts, from the Support Agent field of any ticket to which they are assigned, circumventing role-based access controls.

CWE	CWE-862
Vendor	ultimate fosters
Product	perfect support ticketing & document management system
Published	Jul 16, 2026
Last Updated	Jul 16, 2026

Stay Ahead of the Next One

Get instant alerts for ultimate fosters perfect support ticketing & document management system

Be the first to know when new medium vulnerabilities affecting ultimate fosters perfect support ticketing & document management system are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Affected Versions

Ultimate Fosters / Perfect Support Ticketing & Document Management System

0 ≤ 1.7

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/aaronamran/CVE-Disclosures/blob/main/CVE-2026/CVE-2026-63082 vulncheck.com: https://www.vulncheck.com/advisories/perfect-support-ticketing-system-broken-access-control-via-agent-assignment

Credits

Aaron Amran Bin Amiruddin Shahrul Nizam Bin Shahrin