CVE record · 1 source
CVE-2026-114400
CVSS 5.9Trudesk through 1.2.11 contains a missing authentication vulnerability that allows unauthenticated attackers to download private ticket attachments…
- Vendor
- Cisco
- Product
- asa
- CVSS
- 5.9
- Exposure class
- Edge / VPN / firewall
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Trudesk through 1.2.11 contains a missing authentication vulnerability that allows unauthenticated attackers to download private ticket attachments…
Trudesk through 1.2.11 contains a missing authentication vulnerability that allows unauthenticated attackers to download private ticket attachments under /uploads. Because express.static serves the public/ directory before the…