Skip to content
Freescout-help-desk vulnerabilities
Newest
-
freescout-help-desk freescout
FreeScout: Conditional stored admin XSS via failed-job details
CVE-2026-85742
7.5 High
-
freescout-help-desk freescout
FreeScout: a restricted agent can lift their own admin-imposed "see only assigned conversations" restriction via profile save
CVE-2026-103985
7.1 High
-
freescout-help-desk freescout
FreeScout: Incomplete fix for CVE-2026-40570: load_customer_info exposes cross-visibility customer PII
CVE-2026-103984
6.5 Medium
-
freescout-help-desk freescout
FreeScout: Server-side request forgery via incomplete outbound host validation and unguarded download sinks
CVE-2026-85743
8.2 High
-
freescout-help-desk freescout
FreeScout: Conversation Merge Cross-Mailbox Authorization Bypass
CVE-2026-85744
5.4 Medium
-
freescout-help-desk freescout
FreeScout: Administrative tools.php endpoint is accessible to low-privileged users, enabling filesystem enumeration and unthrottled brute-force of application secrets
CVE-2026-62850
5.3 Medium
-
freescout-help-desk freescout
FreeScout: Missing Authorization and Exposure of Sensitive Information to an Unauthorized Actor and Authorization Bypass Through User-Controlled Key
CVE-2026-62852
6.5 Medium
-
freescout-help-desk freescout
FreeScout: Path Traversal in App Logs Viewer Exposes Arbitrary Local Files
CVE-2026-62855
4.4 Medium
-
freescout-help-desk freescout
FreeScout: Cross-mailbox conversation existence / internal-id disclosure via the search-by-number (`#`) shortcut (missing mailbox authorization)
CVE-2026-62851
4.3 Medium
-
freescout-help-desk freescout
FreeScout: Cross-User Notification Data Disclosure via LIKE Wildcard Injection in Polycast Channel Query
CVE-2026-62856
7.7 High
-
freescout-help-desk freescout
FreeScout: Stored XSS in mailbox signature via same-origin JS upload
CVE-2026-62854
7.6 High
-
freescout-help-desk freescout
FreeScout: Stored HTML Injection in Administrator Alert Emails via Spoofed CF-Connecting-IP Header
CVE-2026-107393
6.1 Medium
-
freescout-help-desk freescout
FreeScout has unrestricted file upload without rate limiting that leads to resource exhaustion (DoS)
CVE-2026-53596
5.3 Medium
-
freescout-help-desk freescout
FreeScout vulnerable to anonymous account takeover via /user-setup empty invite_hash on MySQL
CVE-2026-53595
Public exploit
9.4 Critical
-
freescout-help-desk freescout
FreeScout has Arbitrary File Read in App Logs Viewer via Forged Encrypted Path
CVE-2026-53594
4.9 Medium
-
freescout-help-desk freescout
FreeScout Vulnerable to Authenticated Remote Code Execution via incomplete upload extension denylist (.pht) — bypass of CVE-2025-48471
CVE-2026-53593
8.8 High
-
freescout-help-desk freescout
FreeScout vulnerable to prototype pollution in getQueryParam
CVE-2026-53592
4.6 Medium
-
freescout-help-desk freescout
FreeScout Vulnerable to Unauthenticated Conversation Thread Injection via HMAC Length Bypass in FetchEmails
CVE-2026-53591
8.6 High
-
freescout-help-desk freescout
FreeScout Allows Unauthenticated Access to Legacy Attachment Files
CVE-2026-48812
7.5 High
-
freescout-help-desk freescout
FreeScout Vulnerable to Unauthenticated Thread Read-Status Manipulation and Conversation Enumeration via Open Tracking Endpoint
CVE-2026-45295
6.5 Medium
-
freescout-help-desk freescout
FreeScout: User Account Enumeration via Password Reset Response Differentiation
CVE-2026-45294
5.3 Medium
-
freescout-help-desk freescout
FreeScout: Agent Impersonation via Missing HMAC Verification on Notification Reply Message-ID Path
CVE-2026-47123
7.5 High
-
freescout-help-desk freescout
FreeScout: Thread Edit Authorization Bypass via Missing Mailbox Check
CVE-2026-48810
4.3 Medium
-
freescout-help-desk freescout
FreeScout: Thread Deletion Bypasses Mailbox Access Revocation
CVE-2026-48811
4.3 Medium
-
freescout-help-desk freescout
FreeScout: Conversation Change-Customer Cross-Mailbox Authorization Bypass
CVE-2026-41906
7.1 High
-
freescout-help-desk freescout
FreeScout vulnerable to SSRF via Helper::sanitizeRemoteUrl: redirect destination not re-validated, allowing internal HTTP / cloud-metadata access
CVE-2026-41905
7.7 High
-
freescout-help-desk freescout
FreeScout Stored XSS vulnerability in mailbox auto-reply: payload reaches every customer's email client (no CSP), bypassing strip_tags validator with mixed text+HTML content
CVE-2026-41904
7.6 High
-
freescout-help-desk freescout
FreeScout's user invitation hash never expires: permanent unauthenticated account takeover if invite link leaks
CVE-2026-41902
9.1 Critical
-
freescout-help-desk freescout
FreeScout IDOR Vulnerability: PERM_EDIT_USERS allows modifying any user's notification subscriptions (incomplete fix of CVE-2025-48472)
CVE-2026-41903
5.4 Medium
-
freescout-help-desk freescout
FreeScout's Mailbox OAuth disconnect uses a state-changing GET and is CSRFable
CVE-2026-41194
5.4 Medium
-
freescout-help-desk freescout
FreeScout has Zip Slip path traversal in module installation that allows arbitrary file write leading to RCE
CVE-2026-41193
9.1 Critical
-
freescout-help-desk freescout
FreeScout's client-controlled attachment IDs allow deletion of existing conversation attachments
CVE-2026-41192
7.1 High
-
freescout-help-desk freescout
FreeScout's signature only mailbox permission allows unauthorized mailbox chat setting changes
CVE-2026-41191
7.1 High
-
freescout-help-desk freescout
FreeScout has assigned-only visibility bypass via save_draft that allows hidden conversation draft injection
CVE-2026-41190
7.1 High
-
freescout-help-desk freescout
FreeScout has assigned-only visibility bypass that allows editing hidden customer-authored threads
CVE-2026-41189
7.1 High
-
freescout-help-desk freescout
FreeScout allows non-folder conversation queries to disclose assigned-only hidden conversations
CVE-2026-41183
4.3 Medium
-
freescout-help-desk freescout
FreeScout's cross-user undo reply allows mailbox peers to recall another agent's outbound reply
CVE-2026-40592
5.9 Medium
-
freescout-help-desk freescout
FreeScout: Improper Authorization in Phone Conversation Creation Enables Cross-Mailbox Hidden Customer Modification
CVE-2026-40591
7.1 High
-
freescout-help-desk freescout
FreeScout's Customer AJAX Create Modifies Hidden Existing Customer
CVE-2026-40590
4.3 Medium
-
freescout-help-desk freescout
FreeScout has Customer Edit Cross-Mailbox Email Takeover
CVE-2026-40589
7.6 High
-
freescout-help-desk freescout
FreeScout's Missing Authorization in load_customer_info Allows Any Authenticated User to Access Full Customer PII
CVE-2026-40570
5.7 Medium
-
freescout-help-desk freescout
FreeScout's Mass Assignment in Mailbox Connection Settings Enables Silent Email Exfiltration
CVE-2026-40569
9.0 Critical
-
freescout-help-desk freescout
FreeScout Vulnerable to XSS via Mailbox Signature Due to Incomplete HTML Sanitization
CVE-2026-40568
8.5 High
-
freescout-help-desk freescout
FreeScout has HTML Injection in Outgoing Emails via Unsanitized Customer Name in Signature Variables
CVE-2026-40567
5.8 Medium
-
freescout-help-desk freescout
FreeScout vulnerable to SSRF via IMAP/SMTP Connection Test Endpoints
CVE-2026-40566
4.1 Medium
-
freescout
FreeScout has Stored XSS / CSS Injection via linkify() — Unescaped URL in Anchor href
CVE-2026-40565
6.1 Medium
-
freescout
FreeScout has Authentication Bypass and Information Disclosure in SystemController via /system/cron
CVE-2026-40498
8.9 High
-
freescout
FreeScout Vulnerable to CSS Injection via Stored Style Tag in Mailbox Signature (CSRF Token Exfiltration)
CVE-2026-40497
8.1 High
-
freescout
FreeScout has Predictable Attachment Token that Allows Unauthenticated Private File Download via Brute Force
CVE-2026-40496
8.8 High
-
freescout
FreeScout has an Unauthenticated IDOR in Open Tracking Endpoint Allows Cross-Conversation Thread Manipulation and Enumeration
CVE-2026-35584
Public exploit
6.9 Medium
- Show olderLoading…