CVE-2026-114400

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-114400
Trudesk through 1.2.11 contains a missing authentication vulnerability that allows unauthenticated attackers to download private ticket attachments under /uploads. Because express.static serves the public/ directory before the hasAuth-guarded /uploads mount, attackers who know or guess a ticket ObjectId and filename can retrieve confidential attachments.

5.9 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/polonel/trudesk/issues/754 Issue Tracking
https://hackmd.io/@leediay/multiple-vuln-trudesk-1211 Exploit Third Party Advisory
https://www.vulncheck.com/advisories/trudesk-through-1.2.11-missing-authentication-for-ticket-attachments-via-uploads Third Party Advisory
https://zineausa.com/blog/2026/10/trudesk-1-2-11-unauthorized-ticket-access-idor/ Exploit Third Party Advisory
https://hackmd.io/@leediay/multiple-vuln-trudesk-1211 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:trudesk_project:trudesk:*:*:*:*:*:*:*:*
History

29 Oct 2026, 15:31

Type Values Removed Values Added
First Time Trudesk Project
Trudesk Project trudesk
CPE cpe:2.3:a:trudesk_project:trudesk:*:*:*:*:*:*:*:*
References () https://github.com/polonel/trudesk/issues/754 - () https://github.com/polonel/trudesk/issues/754 - Issue Tracking
References () https://hackmd.io/@leediay/multiple-vuln-trudesk-1211 - () https://hackmd.io/@leediay/multiple-vuln-trudesk-1211 - Exploit, Third Party Advisory
References () https://www.vulncheck.com/advisories/trudesk-through-1.2.11-missing-authentication-for-ticket-attachments-via-uploads - () https://www.vulncheck.com/advisories/trudesk-through-1.2.11-missing-authentication-for-ticket-attachments-via-uploads - Third Party Advisory
References () https://zineausa.com/blog/2026/10/trudesk-1-2-11-unauthorized-ticket-access-idor/ - () https://zineausa.com/blog/2026/10/trudesk-1-2-11-unauthorized-ticket-access-idor/ - Exploit, Third Party Advisory

23 Oct 2026, 19:17

Type Values Removed Values Added
References
  • {'url': 'https://github.com/polonel/trudesk', 'source': 'disclosure@vulncheck.com'}
  • {'url': 'https://github.com/polonel/trudesk/blob/v1.2.11/src/middleware/index.js#L140', 'source': 'disclosure@vulncheck.com'}
  • {'url': 'https://github.com/polonel/trudesk/blob/v1.2.11/src/middleware/index.js#L59-L65', 'source': 'disclosure@vulncheck.com'}
  • () https://github.com/polonel/trudesk/issues/754 -
  • () https://zineausa.com/blog/2026/10/trudesk-1-2-11-unauthorized-ticket-access-idor/ -

21 Oct 2026, 14:17

Type Values Removed Values Added
References () https://hackmd.io/@leediay/multiple-vuln-trudesk-1211 - () https://hackmd.io/@leediay/multiple-vuln-trudesk-1211 -

21 Oct 2026, 13:18

Type Values Removed Values Added
New CVE
Information

Published : 2026-10-21 13:18

Updated : 2026-10-29 15:31

NVD link : CVE-2026-114400

Mitre link : CVE-2026-114400

CVE.ORG link : CVE-2026-114400

JSON object : View

Products Affected

trudesk_project

  • trudesk
CWE
CWE-552

Files or Directories Accessible to External Parties