Vulnerabilities in polonel
30 resultsCVE-2026-114396HIGHTrudesk through 1.2.11 MongoDB $where Injection via tickets search APIEPSS 0.5%CVE-2026-114400HIGHTrudesk through 1.2.11 Missing Authentication for Ticket Attachments via /uploadsEPSS 0.5%CVE-2026-114401MEDIUMTrudesk through 1.2.11 Username Enumeration via Regex Injection in /api/v1/loginEPSS 0.4%CVE-2026-114392MEDIUMTrudesk through 1.2.11 Authorization Bypass via GET /api/v1/tickets/:uidEPSS 0.4%CVE-2026-114402MEDIUMTrudesk through 1.2.11 Path Traversal and Authorization Bypass via Profile Image UploadEPSS 0.4%CVE-2026-114393MEDIUMTrudesk through 1.2.11 Authorization Bypass via Ticket Update API EndpointsEPSS 0.3%CVE-2026-114395MEDIUMTrudesk through 1.2.11 Authorization Bypass via /api/v1/messages/sendEPSS 0.3%CVE-2026-114394MEDIUMTrudesk through 1.2.11 Authorization Bypass via Ticket Comment and Create APIsEPSS 0.3%CVE-2026-111345MEDIUMTrudesk through 1.2.11 Authorization Bypass via GET /api/v1/messages/conversation/:idEPSS 0.3%CVE-2026-114398MEDIUMTrudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogoEPSS 0.3%