PatchSiren

polonel CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM polonel CVE published 2026-10-15

CVE-2026-111345

CVE-2026-111345 is an authorization bypass vulnerability in Trudesk versions up to 1.2.11. The vulnerability allows any authenticated user to read private conversations by supplying another conversation's id in the GET /api/v1/messages/conversation/:id request, which lacks participant checks. This issue can lead to unauthorized access to sensitive information. Defenders should assess exposure and prioriti [truncated]