Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

freescout — Vulnerabilities & Security Advisories 78

All 78 CVE vulnerabilities found in freescout, with AI-generated Chinese analysis, references, and POCs.

This page documents known security weaknesses associated with Freescout, an open-source help desk ticketing solution. It aggregates vulnerability data related to the software, focusing on common weakness categories such as Cross-Site Scripting, SQL Injection, and Broken Access Control that affect this specific vendor’s product line. The collection covers publicly disclosed vulnerabilities from the initial release of Freescout through recent updates, providing a comprehensive timeline of security issues affecting the platform. By reviewing this aggregation, users can track a vendor’s advisory history to understand how quickly security flaws are addressed and patched. It allows administrators to understand the prevalence and impact of specific weakness classes within the context of a help desk application. Furthermore, the page serves as a historical record for looking up a product’s vulnerability timeline, helping security teams assess risk exposure and prioritize remediation efforts based on past incidents. This resource is intended for developers, system administrators, and security analysts who need to evaluate the security posture of Freescout installations or compare vulnerability trends across similar ticketing systems. The data is compiled from public advisories, vendor notifications, and community reports to ensure accuracy and completeness for audit and compliance purposes.

Vendor: freescout-helpdesk

CVE IDTitleCVSSSeverityPublished
CVE-2026-53596 FreeScout has unrestricted file upload without rate limiting that leads to resource exhaustion (DoS) CWE-400 5.3 Medium2026-07-20
CVE-2026-53595 FreeScout vulnerable to anonymous account takeover via /user-setup empty invite_hash on MySQL CWE-178 9.4 Critical2026-07-20
CVE-2026-53594 FreeScout has Arbitrary File Read in App Logs Viewer via Forged Encrypted Path CWE-22 4.9 Medium2026-07-20
CVE-2026-53593 FreeScout Vulnerable to Authenticated Remote Code Execution via incomplete upload extension denylist (.pht) — bypass of CVE-2025-48471 CWE-434 8.8 High2026-07-20
CVE-2026-53592 FreeScout vulnerable to prototype pollution in getQueryParam CWE-1321 4.6 Medium2026-07-20
CVE-2026-53591 FreeScout Vulnerable to Unauthenticated Conversation Thread Injection via HMAC Length Bypass in FetchEmails CWE-287 8.6 High2026-07-20
CVE-2026-48812 FreeScout Allows Unauthenticated Access to Legacy Attachment Files CWE-287 7.5 High2026-07-20
CVE-2026-45295 FreeScout Vulnerable to Unauthenticated Thread Read-Status Manipulation and Conversation Enumeration via Open Tracking Endpoint CWE-639 6.5 Medium2026-07-20
CVE-2026-45294 FreeScout: User Account Enumeration via Password Reset Response Differentiation CWE-203 5.3 Medium2026-05-29
CVE-2026-47123 FreeScout: Agent Impersonation via Missing HMAC Verification on Notification Reply Message-ID Path CWE-290 7.5 High2026-05-29
CVE-2026-48810 FreeScout: Thread Edit Authorization Bypass via Missing Mailbox Check CWE-285 4.3 Medium2026-05-29
CVE-2026-48811 FreeScout: Thread Deletion Bypasses Mailbox Access Revocation CWE-862 4.3 Medium2026-05-29
CVE-2026-41906 FreeScout: Conversation Change-Customer Cross-Mailbox Authorization Bypass CWE-639 7.1 High2026-05-07
CVE-2026-41905 FreeScout vulnerable to SSRF via Helper::sanitizeRemoteUrl: redirect destination not re-validated, allowing internal HTTP / cloud-metadata access CWE-918 7.7 High2026-05-07
CVE-2026-41904 FreeScout Stored XSS vulnerability in mailbox auto-reply: payload reaches every customer's email client (no CSP), bypassing strip_tags validator with mixed text+HTML content CWE-79 7.6 High2026-05-07
CVE-2026-41902 FreeScout's user invitation hash never expires: permanent unauthenticated account takeover if invite link leaks CWE-613 9.1 Critical2026-05-07
CVE-2026-41903 FreeScout IDOR Vulnerability: PERM_EDIT_USERS allows modifying any user's notification subscriptions (incomplete fix of CVE-2025-48472) CWE-863 5.4 Medium2026-05-07
CVE-2026-41194 FreeScout's Mailbox OAuth disconnect uses a state-changing GET and is CSRFable CWE-352 5.4 Medium2026-04-21
CVE-2026-41193 FreeScout has Zip Slip path traversal in module installation that allows arbitrary file write leading to RCE CWE-22 9.1 Critical2026-04-21
CVE-2026-41192 FreeScout's client-controlled attachment IDs allow deletion of existing conversation attachments CWE-862 7.1 High2026-04-21
CVE-2026-41191 FreeScout's signature only mailbox permission allows unauthorized mailbox chat setting changes CWE-863 7.1 High2026-04-21
CVE-2026-41190 FreeScout has assigned-only visibility bypass via save_draft that allows hidden conversation draft injection CWE-863 7.1 High2026-04-21
CVE-2026-41189 FreeScout has assigned-only visibility bypass that allows editing hidden customer-authored threads CWE-863 7.1 High2026-04-21
CVE-2026-41183 FreeScout allows non-folder conversation queries to disclose assigned-only hidden conversations CWE-200 4.3 Medium2026-04-21
CVE-2026-40592 FreeScout's cross-user undo reply allows mailbox peers to recall another agent's outbound reply CWE-862 5.9 Medium2026-04-21
CVE-2026-40591 FreeScout: Improper Authorization in Phone Conversation Creation Enables Cross-Mailbox Hidden Customer Modification CWE-639 7.1 High2026-04-21
CVE-2026-40590 FreeScout's Customer AJAX Create Modifies Hidden Existing Customer CWE-639 4.3 Medium2026-04-21
CVE-2026-40589 FreeScout has Customer Edit Cross-Mailbox Email Takeover CWE-639 7.6 High2026-04-21
CVE-2026-40570 FreeScout's Missing Authorization in load_customer_info Allows Any Authenticated User to Access Full Customer PII CWE-639 4.3AIMediumAI2026-04-21
CVE-2026-40569 FreeScout's Mass Assignment in Mailbox Connection Settings Enables Silent Email Exfiltration CWE-284 9.0 Critical2026-04-21

All 78 known CVE vulnerabilities affecting freescout with full Chinese analysis, references, and POCs where available.