CVE-2026-114393

Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to modify tickets outside their groups via PUT /api/v1/tickets/:id and PUT /api/v2/tickets/batch. Attackers can supply arbitrary ticket ObjectIds to change status, subject, group, priority or assignee, or mass-close tickets, since only the default tickets:update role grant is checked.

• CWE-639

• https://github.com/polonel/trudeskProduct
• https://github.com/polonel/trudesk/blob/v1.2.11/src/controllers/api/v1/tickets.js#L767-L883Patch
• https://github.com/polonel/trudesk/blob/v1.2.11/src/controllers/api/v2/tickets.js#L167-L197Patch
• https://hackmd.io/@leediay/multiple-vuln-trudesk-1211Exploit, Third Party Advisory
• https://www.vulncheck.com/advisories/trudesk-through-1.2.11-authorization-bypass-via-ticket-update-api-endpointsThird Party Advisory
• https://hackmd.io/@leediay/multiple-vuln-trudesk-1211Exploit, Third Party Advisory

Published

Oct 21, 2026

Last Modified

Oct 30, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-114388Chamilo LMS 2.0.0 pre-releases from 2.0.0-alpha.1 before 2.0…5.3
• CVE-2026-114389Chamilo LMS from 2.0.0-alpha.4 before 2.0.0-RC.3 contains a …4.3
• CVE-2026-11439A vulnerability was found in theonedev onedev up to 15.0.5. …6.3
• CVE-2026-114390Chamilo LMS from 2.0.0-alpha.1 before 2.0.0-RC.3 contains a …5.3
• CVE-2026-114391ZenTao PMS before 22.3 contains an authorization bypass vuln…7.1
• CVE-2026-114392Trudesk through 1.2.11 contains an authorization bypass vuln…5.3
• CVE-2026-114394Trudesk through 1.2.11 contains an authorization bypass vuln…4.3
• CVE-2026-114395Trudesk through 1.2.11 contains an authorization bypass vuln…4.3
• CVE-2026-114396Trudesk through 1.2.11 contains a server-side JavaScript inj…7.1
• CVE-2026-114397Trudesk through 1.2.11 contains a missing authentication vul…7.4
• CVE-2026-114398Trudesk through 1.2.11 contains an unrestricted file upload …5.4
• CVE-2026-114399Trudesk through 1.2.11 contains a path traversal vulnerabili…6.5