Vulnerability · Published Oct 21, 2026 · Assigned by VulnCheck

CVE-2026-114392Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/tickets/:uid

Medium 5.3

In plain English

A medium-severity authorization bypass via user-controlled key in trudesk from polonel. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.4%top 61.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows authenticated users to read tickets outside their groups via GET /api/v1/tickets/:uid. Attackers can enumerate sequential ticket uids to read every ticket's subject, issue, comments, owner and assignee, because the apiTickets.single handler skips group membership checks.

Affected products (as reported)

Vendor	Product	Versions
polonel	trudesk	0 – through 1.2.11

Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References

Zinea InfoSec Blog technical-description, exploit
GitHub Issue 754 issue-tracking
Researcher Disclosure exploit, technical-description
VulnCheck Advisory: Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/tickets/:uid third-party-advisory