trudesk 产品相关 12 条漏洞，AI 中文标题与摘要、CVSS、POC 一站汇总。
厂商: polonel
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-114402 | Trudesk 1.2.11 路径遍历与授权绕过漏洞 CWE-22 | 4.3 | Medium | 2026-10-21 |
| CVE-2026-114400 | Trudesk 1.2.11 工单附件认证绕过漏洞 CWE-552 | 5.9 | Medium | 2026-10-21 |
| CVE-2026-114401 | Trudesk 1.2.11 登录接口正则注入导致用户名枚举 CWE-943 | 5.3 | Medium | 2026-10-21 |
| CVE-2026-114399 | Trudesk 1.2.11 备份 API 路径遍历漏洞 CWE-22 | 6.5 | Medium | 2026-10-21 |
| CVE-2026-114398 | Trudesk 1.2.11 未限制文件上传漏洞 CWE-434 | 5.4 | Medium | 2026-10-21 |
| CVE-2026-114397 | Trudesk 1.2.11 调试路由认证绕过漏洞 CWE-1188 | 7.4 | High | 2026-10-21 |
| CVE-2026-114396 | Trudesk 1.2.11 工单搜索 API MongoDB 注入漏洞 CWE-943 | 7.1 | High | 2026-10-21 |
| CVE-2026-114395 | Trudesk 1.2.11 远程授权绕过漏洞 CWE-639 | 4.3 | Medium | 2026-10-21 |
| CVE-2026-114393 | Trudesk 1.2.11 工单更新接口绕过授权漏洞 CWE-639 | 4.3 | Medium | 2026-10-21 |
| CVE-2026-114394 | Trudesk 1.2.11 工单接口授权绕过漏洞 CWE-639 | 4.3 | Medium | 2026-10-21 |
| CVE-2026-114392 | Trudesk 1.2.11 权限绕过漏洞 CWE-639 | 4.3 | Medium | 2026-10-21 |
| CVE-2026-111345 | Trudesk 1.2.11 通过GET /api/v1/messages/conversation/:id绕过授权漏洞 CWE-639 | 4.3 | Medium | 2026-10-15 |
trudesk 产品累计公开 12 条 CVE 漏洞，本页提供按时间倒序的完整列表，包含 CVSS、CWE、AI 中文摘要与可获取的 POC 链接。