PO
Vendor
polonel
14
CVEs
0
On KEV
12
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-114402 | TR trudesk polonel | 4.3 | Oct 21 | Trudesk through 1.2.11 Path Traversal and Authorization Bypass via Profile Image Upload |
| CVE-2026-114401 | TR trudesk polonel | 5.3 | Oct 21 | Trudesk through 1.2.11 Username Enumeration via Regex Injection in /api/v1/login |
| CVE-2026-114400 | TR trudesk polonel | 5.9 | Oct 21 | Trudesk through 1.2.11 Missing Authentication for Ticket Attachments via /uploads |
| CVE-2026-114399 | TR trudesk polonel | 6.5 | Oct 21 | Trudesk through 1.2.11 Path Traversal via Backup Delete and Restore API |
| CVE-2026-114398 | TR trudesk polonel | 5.4 | Oct 21 | Trudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogo |
| CVE-2026-114397 | TR trudesk polonel | 7.4 | Oct 21 | Trudesk through 1.2.11 Missing Authentication on Debug Routes |
| CVE-2026-114396 | TR trudesk polonel | 7.1 | Oct 21 | Trudesk through 1.2.11 MongoDB $where Injection via tickets search API |
| CVE-2026-114395 | TR trudesk polonel | 4.3 | Oct 21 | Trudesk through 1.2.11 Authorization Bypass via /api/v1/messages/send |
| CVE-2026-114394 | TR trudesk polonel | 4.3 | Oct 21 | Trudesk through 1.2.11 Authorization Bypass via Ticket Comment and Create APIs |
| CVE-2026-114393 | TR trudesk polonel | 4.3 | Oct 21 | Trudesk through 1.2.11 Authorization Bypass via Ticket Update API Endpoints |
| CVE-2026-114392 | TR trudesk polonel | 5.3 | Oct 21 | Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/tickets/:uid |
| CVE-2026-111345 | TR trudesk polonel | 4.3 | Oct 15 | Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/messages/conversation/:id |
| CVE-2022-1718 | PO polonel/trudesk polonel | 7.5 | May 16 | The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in polonel/trudesk |
| CVE-2022-1719 | PO polonel/trudesk polonel | 5.4 | May 16 | Reflected XSS on ticket filter function in polonel/trudesk |