polonel trudesk

• CVE-2026-114402 Medium 4.3 Trudesk through 1.2.11 Path Traversal and Authorization Bypass via Profile Image Upload 0.4%
• CVE-2026-114401 Medium 5.3 Trudesk through 1.2.11 Username Enumeration via Regex Injection in /api/v1/login 0.4%
• CVE-2026-114400 Medium 5.9 Trudesk through 1.2.11 Missing Authentication for Ticket Attachments via /uploads 0.5%
• CVE-2026-114399 Medium 6.5 Trudesk through 1.2.11 Path Traversal via Backup Delete and Restore API 0.6%
• CVE-2026-114398 Medium 5.4 Trudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogo 0.3%
• CVE-2026-114397 High 7.4 Trudesk through 1.2.11 Missing Authentication on Debug Routes 0.6%
• CVE-2026-114396 High 7.1 Trudesk through 1.2.11 MongoDB $where Injection via tickets search API 0.5%
• CVE-2026-114395 Medium 4.3 Trudesk through 1.2.11 Authorization Bypass via /api/v1/messages/send 0.3%
• CVE-2026-114394 Medium 4.3 Trudesk through 1.2.11 Authorization Bypass via Ticket Comment and Create APIs 0.3%
• CVE-2026-114393 Medium 4.3 Trudesk through 1.2.11 Authorization Bypass via Ticket Update API Endpoints 0.3%
• CVE-2026-114392 Medium 5.3 Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/tickets/:uid 0.4%
• CVE-2026-111345 Medium 4.3 Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/messages/conversation/:id 0.3%