Vulnerabilidades em polonel
30 resultadosAnálise Vexday
A polonel apresenta 18 vulnerabilidades catalogadas, com 8 classificadas como críticas, mas nenhuma sob exploração ativa conhecida. O risco dominante concentra-se em problemas de overflow aritmético (CWE-190), típicos de falhas em validação numérica. A ausência de publicações recentes sugere que o inventário de vulnerabilidades é histórico, reduzindo a urgência de remediação imediata, embora as críticas demandem atenção prioritária.
CVE-2026-114396HIGHTrudesk through 1.2.11 MongoDB $where Injection via tickets search APIEPSS 0.5%CVE-2026-114400HIGHTrudesk through 1.2.11 Missing Authentication for Ticket Attachments via /uploadsEPSS 0.5%CVE-2026-114401MEDIUMTrudesk through 1.2.11 Username Enumeration via Regex Injection in /api/v1/loginEPSS 0.4%CVE-2026-114392MEDIUMTrudesk through 1.2.11 Authorization Bypass via GET /api/v1/tickets/:uidEPSS 0.4%CVE-2026-114402MEDIUMTrudesk through 1.2.11 Path Traversal and Authorization Bypass via Profile Image UploadEPSS 0.4%CVE-2026-114393MEDIUMTrudesk through 1.2.11 Authorization Bypass via Ticket Update API EndpointsEPSS 0.3%CVE-2026-114395MEDIUMTrudesk through 1.2.11 Authorization Bypass via /api/v1/messages/sendEPSS 0.3%CVE-2026-114394MEDIUMTrudesk through 1.2.11 Authorization Bypass via Ticket Comment and Create APIsEPSS 0.3%CVE-2026-111345MEDIUMTrudesk through 1.2.11 Authorization Bypass via GET /api/v1/messages/conversation/:idEPSS 0.3%CVE-2026-114398MEDIUMTrudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogoEPSS 0.3%