polonel vulnerabilities

CVEs per yearBy the year they were published

1. 202218
2. 202612

Newest CVEs

• CVE-2026-114402

  Trudesk through 1.2.11 Path Traversal and Authorization Bypass via Profile Image Upload

  polonel · trudesk

  Medium5.3
• CVE-2026-114401

  Trudesk through 1.2.11 Username Enumeration via Regex Injection in /api/v1/login

  polonel · trudesk

  Medium6.9
• CVE-2026-114400

  Trudesk through 1.2.11 Missing Authentication for Ticket Attachments via /uploads

  polonel · trudesk

  High8.2
• CVE-2026-114399

  Trudesk through 1.2.11 Path Traversal via Backup Delete and Restore API

  polonel · trudesk

  High7.0
• CVE-2026-114398

  Trudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogo

  polonel · trudesk

  Medium5.1
• CVE-2026-114397

  Trudesk through 1.2.11 Missing Authentication on Debug Routes

  polonel · trudesk

  High8.3
• CVE-2026-114396

  Trudesk through 1.2.11 MongoDB $where Injection via tickets search API

  polonel · trudesk

  High7.1
• CVE-2026-114395

  Trudesk through 1.2.11 Authorization Bypass via /api/v1/messages/send

  polonel · trudesk

  Medium5.3
• CVE-2026-114394

  Trudesk through 1.2.11 Authorization Bypass via Ticket Comment and Create APIs

  polonel · trudesk

  Medium5.3
• CVE-2026-114393

  Trudesk through 1.2.11 Authorization Bypass via Ticket Update API Endpoints

  polonel · trudesk

  Medium5.3