https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-09T15:26:57.542666+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-114394 fkie_cve-2026-114394 2026-11-09T15:26:57.545809+00:00

Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows authenticated users to post content attributed to other users by supplying user-controlled owner IDs. Attackers can set ownerId or owner in postComment, postInternalNote, and ticket create requests to forge administrator-authored comments, internal notes, and tickets on any ticket.

 https://db.gcve.eu/vuln/ghsa-x3mr-67c9-5xq8 GHSA-x3mr-67c9-5xq8 2026-11-09T15:26:57.545903+00:00

Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows authenticated users to post content attributed to other users by supplying user-controlled owner IDs. Attackers can set ownerId or owner in postComment, postInternalNote, and ticket create requests to forge administrator-authored comments, internal notes, and tickets on any ticket.