CVE ID :CVE-2026-114400 Published : Oct. 21, 2026, 1:18 p.m. | 48 minutes ago Description :Trudesk through 1.2.11 contains a missing authentication vulnerability that allows unauthenticated attackers to download private ticket attachments under /uploads. Because express.static serves the...