Login Request a demo
TR
Product
trudesk
by polonel · last CVE Oct 21, 2026
12
CVEs
0
On KEV
7.4
Max CVSS
12
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 0High 2Medium 10Low 0
Severity
All severities12Critical0High2Medium10Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add trudesk to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-114399
6.5
1%
Oct 21
Trudesk through 1.2.11 Path Traversal via Backup Delete and Restore API
Affected: through 1.2.11
CVE-2026-114400
5.9
1%
Oct 21
Trudesk through 1.2.11 Missing Authentication for Ticket Attachments via /uploads
Affected: through 1.2.11
CVE-2026-114398
5.4
0%
Oct 21
Trudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogo
Affected: through 1.2.11
CVE-2026-114401
5.3
0%
Oct 21
Trudesk through 1.2.11 Username Enumeration via Regex Injection in /api/v1/login
Affected: through 1.2.11
CVE-2026-114392
5.3
0%
Oct 21
Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/tickets/:uid
Affected: through 1.2.11
CVE-2026-114402
4.3
0%
Oct 21
Trudesk through 1.2.11 Path Traversal and Authorization Bypass via Profile Image Upload
Affected: through 1.2.11
CVE-2026-114395
4.3
0%
Oct 21
Trudesk through 1.2.11 Authorization Bypass via /api/v1/messages/send
Affected: through 1.2.11
CVE-2026-114394
4.3
0%
Oct 21
Trudesk through 1.2.11 Authorization Bypass via Ticket Comment and Create APIs
Affected: through 1.2.11
CVE-2026-114393
4.3
0%
Oct 21
Trudesk through 1.2.11 Authorization Bypass via Ticket Update API Endpoints
Affected: through 1.2.11
CVE-2026-111345
4.3
0%
Oct 15
Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/messages/conversation/:id
Affected: through 1.2.11
Showing 10