CVE-2026-114392

Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows authenticated users to read tickets outside their groups via GET /api/v1/tickets/:uid. Attackers can enumerate sequential ticket uids to read every ticket's subject, issue, comments, owner and assignee, because the apiTickets.single handler skips group membership checks.

• CWE-639

• https://github.com/polonel/trudesk/issues/754Product
• https://hackmd.io/@leediay/multiple-vuln-trudesk-1211Exploit, Third Party Advisory
• https://www.vulncheck.com/advisories/trudesk-through-1.2.11-authorization-bypass-via-get-api-v1-tickets-uidThird Party Advisory
• https://zineausa.com/blog/2026/10/trudesk-1-2-11-unauthorized-ticket-access-idor/Exploit, Third Party Advisory
• https://zineausa.com/blog/2026/10/trudesk-1-2-11-unauthorized-ticket-access-idor/Exploit, Third Party Advisory

Published

Oct 21, 2026

Last Modified

Oct 30, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-114387Shopper from 2.0.0 before 2.6.0 contains a missing authoriza…8.8
• CVE-2026-114388Chamilo LMS 2.0.0 pre-releases from 2.0.0-alpha.1 before 2.0…5.3
• CVE-2026-114389Chamilo LMS from 2.0.0-alpha.4 before 2.0.0-RC.3 contains a …4.3
• CVE-2026-11439A vulnerability was found in theonedev onedev up to 15.0.5. …6.3
• CVE-2026-114390Chamilo LMS from 2.0.0-alpha.1 before 2.0.0-RC.3 contains a …5.3
• CVE-2026-114391ZenTao PMS before 22.3 contains an authorization bypass vuln…7.1
• CVE-2026-114393Trudesk through 1.2.11 contains an authorization bypass vuln…4.3
• CVE-2026-114394Trudesk through 1.2.11 contains an authorization bypass vuln…4.3
• CVE-2026-114395Trudesk through 1.2.11 contains an authorization bypass vuln…4.3
• CVE-2026-114396Trudesk through 1.2.11 contains a server-side JavaScript inj…7.1
• CVE-2026-114397Trudesk through 1.2.11 contains a missing authentication vul…7.4
• CVE-2026-114398Trudesk through 1.2.11 contains an unrestricted file upload …5.4