CVE-2026-114402 | Polonel Trudesk up to 1.2.11 Account accountsController.uploadImage _id/username path traversal

October 21, 2026 Yanac

A vulnerability identified as problematic has been detected in Polonel Trudesk up to 1.2.11. Affected is the function accountsController.uploadImage of the component Account. Performing a manipulation of the argument _id/username results in path traversal.

This vulnerability is reported as CVE-2026-114402. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More