Login Request a demo
TR
Product
Trudesk
by Trudesk Project · last CVE Oct 21, 2026
31
CVEs
0
On KEV
9.8
Max CVSS
11
New 30D
Vulnerabilities31In the news0Timeline
Severity mix
Critical 3High 8Medium 20Low 0
Severity
All severities31Critical3High8Medium20Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Trudesk to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-1808
8.8
4%
May 31
Execution with Unnecessary Privileges in polonel/trudesk
Affected: before 1.2.3
CVE-2022-1770
8.8
3%
May 20
Improper Privilege Management in polonel/trudesk
Affected: before 1.2.2
CVE-2022-1931
8.1
2%
May 31
Incorrect Synchronization in polonel/trudesk
Affected: before 1.2.3
CVE-2022-1752
8.0
2%
May 21
Unrestricted Upload of File with Dangerous Type in polonel/trudesk
Affected: before 1.2.2
CVE-2026-114400
7.5
1%
Oct 21
Trudesk through 1.2.11 Missing Authentication for Ticket Attachments via /uploads
Affected: through 1.2.11
CVE-2022-1718
7.5
1%
May 16
The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in polonel/trudesk
Affected: before 1.2.2
CVE-2026-114397
7.4
1%
Oct 21
Trudesk through 1.2.11 Missing Authentication on Debug Routes
Affected: through 1.2.11
CVE-2026-114396
7.1
0%
Oct 21
Trudesk through 1.2.11 MongoDB $where Injection via tickets search API
Affected: through 1.2.11
Showing 8