CVE-2026-114396

Trudesk through 1.2.11 contains a server-side JavaScript injection vulnerability that allows authenticated users to inject code into a MongoDB $where clause via the search parameter. Attackers can close the regular expression in GET /api/v1/tickets/search to loop mongod for denial of service or leak full ticket documents including internal notes.

• CWE-943

• https://github.com/polonel/trudeskProduct
• https://github.com/polonel/trudesk/blob/v1.2.11/src/models/ticket.js#L1184-L1215Patch
• https://hackmd.io/@leediay/multiple-vuln-trudesk-1211Exploit, Third Party Advisory
• https://www.vulncheck.com/advisories/trudesk-through-1.2.11-mongodb-where-injection-via-tickets-search-apiThird Party Advisory
• https://hackmd.io/@leediay/multiple-vuln-trudesk-1211Exploit, Third Party Advisory

Published

Oct 21, 2026

Last Modified

Oct 30, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-114390Chamilo LMS from 2.0.0-alpha.1 before 2.0.0-RC.3 contains a …5.3
• CVE-2026-114391ZenTao PMS before 22.3 contains an authorization bypass vuln…7.1
• CVE-2026-114392Trudesk through 1.2.11 contains an authorization bypass vuln…5.3
• CVE-2026-114393Trudesk through 1.2.11 contains an authorization bypass vuln…4.3
• CVE-2026-114394Trudesk through 1.2.11 contains an authorization bypass vuln…4.3
• CVE-2026-114395Trudesk through 1.2.11 contains an authorization bypass vuln…4.3
• CVE-2026-114397Trudesk through 1.2.11 contains a missing authentication vul…7.4
• CVE-2026-114398Trudesk through 1.2.11 contains an unrestricted file upload …5.4
• CVE-2026-114399Trudesk through 1.2.11 contains a path traversal vulnerabili…6.5
• CVE-2026-1144A vulnerability was detected in quickjs-ng quickjs up to 0.1…8.8
• CVE-2026-11440A vulnerability was determined in theonedev onedev up to 15.…6.3
• CVE-2026-114400Trudesk through 1.2.11 contains a missing authentication vul…7.5