Unrated severityNVD Advisory· Published Jul 16, 2026· Updated Jul 16, 2026

Perfect Support Ticketing System 1.7 Broken Access Control via Agent Assignment

CVE-2026-63082

Description

Perfect Support Ticketing & Document Management System through 1.7 contains a broken access control vulnerability that allows authenticated attackers with Agent-level privileges to manipulate the Support Agent assignment field of tickets by bypassing intended authorization checks. Attackers can add or remove any user, including Superadmin accounts, from the Support Agent field of any ticket to which they are assigned, circumventing role-based access controls.

Affected products

Support Ticket System Project/Support Ticket Systemllm-fuzzy
Range: <=1.7

Patches

Vulnerability mechanics

References

github.com/aaronamran/CVE-Disclosures/blob/main/CVE-2026/CVE-2026-63082mitretechnical-descriptionexploit
www.vulncheck.com/advisories/perfect-support-ticketing-system-broken-access-control-via-agent-assignmentmitrethird-party-advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000