CVE-2026-63082

Name of the Vulnerable Software and Affected Versions Perfect Support Ticketing & Document Management System versions prior to 1.8

Description Broken access control allows authenticated attackers with Agent-level privileges to manipulate the Support Agent assignment field of tickets by bypassing authorization checks. This enables attackers to add or remove any user, including Superadmin accounts, from the Support Agent field of any ticket to which they are assigned, circumventing role-based access controls.

Recommendations Update Perfect Support Ticketing & Document Management System to version 1.8 or later.