CVE-2026-114393 Trudesk through 1.2.11 Authorization Bypass via Ticket Update API Endpoints

Trudesk versions up to 1.2.11 are susceptible to an authorization bypass vulnerability (CWE-639) affecting the Ticket Update API Endpoints . The root cause is that the application only verifies the default tickets:update role grant, allowing any authenticated user to modify tickets outside of the...