TR
Product
trudesk
12
CVEs
0
On KEV
7.4
Max CVSS
12
New 30D
Severity mix
Critical 0High 2Medium 10Low 0
Watch
Add trudesk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-114397 New | 7.4 | Oct 21 | Trudesk through 1.2.11 Missing Authentication on Debug Routes Affected: through 1.2.11 |
| CVE-2026-114396 New | 7.1 | Oct 21 | Trudesk through 1.2.11 MongoDB $where Injection via tickets search API Affected: through 1.2.11 |
| CVE-2026-114399 New | 6.5 | Oct 21 | Trudesk through 1.2.11 Path Traversal via Backup Delete and Restore API Affected: through 1.2.11 |
| CVE-2026-114400 New | 5.9 | Oct 21 | Trudesk through 1.2.11 Missing Authentication for Ticket Attachments via /uploads Affected: through 1.2.11 |
| CVE-2026-114398 New | 5.4 | Oct 21 | Trudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogo Affected: through 1.2.11 |
| CVE-2026-114401 New | 5.3 | Oct 21 | Trudesk through 1.2.11 Username Enumeration via Regex Injection in /api/v1/login Affected: through 1.2.11 |
| CVE-2026-114392 New | 5.3 | Oct 21 | Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/tickets/:uid Affected: through 1.2.11 |
| CVE-2026-114402 New | 4.3 | Oct 21 | Trudesk through 1.2.11 Path Traversal and Authorization Bypass via Profile Image Upload Affected: through 1.2.11 |
| CVE-2026-114395 New | 4.3 | Oct 21 | Trudesk through 1.2.11 Authorization Bypass via /api/v1/messages/send Affected: through 1.2.11 |
| CVE-2026-114394 New | 4.3 | Oct 21 | Trudesk through 1.2.11 Authorization Bypass via Ticket Comment and Create APIs Affected: through 1.2.11 |
| CVE-2026-114393 New | 4.3 | Oct 21 | Trudesk through 1.2.11 Authorization Bypass via Ticket Update API Endpoints Affected: through 1.2.11 |
| CVE-2026-111345 | 4.3 | Oct 15 | Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/messages/conversation/:id Affected: through 1.2.11 |
Showing 12