Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

freescout — Vulnerabilities & Security Advisories 90

All 90 CVE vulnerabilities found in freescout, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security weaknesses affecting the freescout open-source helpdesk software, categorized by vendor, product, vulnerability type, and relevant security tags. The collection encompasses a wide spectrum of defects including remote code execution, SQL injection, and cross-site scripting flaws identified from the initial release up to the most recent public disclosures. Readers can utilize this resource to track official advisories from the freescout maintainers, analyze the prevalence of specific weakness classes within the application, or review the complete historical record of vulnerabilities associated with this product. The data is compiled from multiple authoritative sources to ensure comprehensive coverage without duplication, allowing security professionals to assess risk trends over time. By centralizing these findings, the page facilitates efficient triage and remediation planning for system administrators managing freescout installations. Users seeking to understand the evolution of security issues in this specific helpdesk platform will find detailed contextual information regarding each reported defect. This compilation serves as a definitive reference for auditing the security posture of freescout deployments across various environments.

Vendor: freescout-helpdesk

CVE ID Title CVSS Severity Published
CVE-2026-85742 FreeScout: Conditional stored admin XSS via failed-job details CWE-79 7.5 High 2026-11-06
CVE-2026-103985 FreeScout: a restricted agent can lift their own admin-imposed "see only assigned conversations" restriction via profile save CWE-269 7.1 High 2026-11-06
CVE-2026-103984 FreeScout: Incomplete fix for CVE-2026-40570: load_customer_info exposes cross-visibility customer PII CWE-862 6.5 Medium 2026-11-06
CVE-2026-85743 FreeScout: Server-side request forgery via incomplete outbound host validation and unguarded download sinks CWE-918 8.2 High 2026-11-06
CVE-2026-85744 FreeScout: Conversation Merge Cross-Mailbox Authorization Bypass CWE-863 5.4 Medium 2026-11-06
CVE-2026-62850 FreeScout: Administrative tools.php endpoint is accessible to low-privileged users, enabling filesystem enumeration and unthrottled brute-force of application secrets CWE-287 5.3 Medium 2026-11-06
CVE-2026-62852 FreeScout: Missing Authorization and Exposure of Sensitive Information to an Unauthorized Actor and Authorization Bypass Through User-Controlled Key CWE-200 6.5 Medium 2026-11-06
CVE-2026-62855 FreeScout: Path Traversal in App Logs Viewer Exposes Arbitrary Local Files CWE-23 4.4 Medium 2026-11-06
CVE-2026-62851 FreeScout: Cross-mailbox conversation existence / internal-id disclosure via the search-by-number (`#`) shortcut (missing mailbox authorization) CWE-200 4.3 Medium 2026-11-06
CVE-2026-62856 FreeScout: Cross-User Notification Data Disclosure via LIKE Wildcard Injection in Polycast Channel Query CWE-89 7.7 High 2026-11-06
CVE-2026-62854 FreeScout: Stored XSS in mailbox signature via same-origin JS upload CWE-79 7.6 High 2026-11-06
CVE-2026-107393 FreeScout: Stored HTML Injection in Administrator Alert Emails via Spoofed CF-Connecting-IP Header CWE-79 6.1 Medium 2026-10-08
CVE-2026-53596 FreeScout has unrestricted file upload without rate limiting that leads to resource exhaustion (DoS) CWE-400 5.3 Medium 2026-07-20
CVE-2026-53595 FreeScout vulnerable to anonymous account takeover via /user-setup empty invite_hash on MySQL CWE-178 9.4 Critical 2026-07-20
CVE-2026-53594 FreeScout has Arbitrary File Read in App Logs Viewer via Forged Encrypted Path CWE-22 4.9 Medium 2026-07-20
CVE-2026-53593 FreeScout Vulnerable to Authenticated Remote Code Execution via incomplete upload extension denylist (.pht) — bypass of CVE-2025-48471 CWE-434 8.8 High 2026-07-20
CVE-2026-53592 FreeScout vulnerable to prototype pollution in getQueryParam CWE-1321 4.6 Medium 2026-07-20
CVE-2026-53591 FreeScout Vulnerable to Unauthenticated Conversation Thread Injection via HMAC Length Bypass in FetchEmails CWE-287 8.6 High 2026-07-20
CVE-2026-48812 FreeScout Allows Unauthenticated Access to Legacy Attachment Files CWE-287 7.5 High 2026-07-20
CVE-2026-45295 FreeScout Vulnerable to Unauthenticated Thread Read-Status Manipulation and Conversation Enumeration via Open Tracking Endpoint CWE-639 6.5 Medium 2026-07-20
CVE-2026-45294 FreeScout: User Account Enumeration via Password Reset Response Differentiation CWE-203 5.3 Medium 2026-05-29
CVE-2026-47123 FreeScout: Agent Impersonation via Missing HMAC Verification on Notification Reply Message-ID Path CWE-290 7.5 High 2026-05-29
CVE-2026-48810 FreeScout: Thread Edit Authorization Bypass via Missing Mailbox Check CWE-285 4.3 Medium 2026-05-29
CVE-2026-48811 FreeScout: Thread Deletion Bypasses Mailbox Access Revocation CWE-862 4.3 Medium 2026-05-29
CVE-2026-41906 FreeScout: Conversation Change-Customer Cross-Mailbox Authorization Bypass CWE-639 7.1 High 2026-05-07
CVE-2026-41905 FreeScout vulnerable to SSRF via Helper::sanitizeRemoteUrl: redirect destination not re-validated, allowing internal HTTP / cloud-metadata access CWE-918 7.7 High 2026-05-07
CVE-2026-41904 FreeScout Stored XSS vulnerability in mailbox auto-reply: payload reaches every customer's email client (no CSP), bypassing strip_tags validator with mixed text+HTML content CWE-79 7.6 High 2026-05-07
CVE-2026-41902 FreeScout's user invitation hash never expires: permanent unauthenticated account takeover if invite link leaks CWE-613 9.1 Critical 2026-05-07
CVE-2026-41903 FreeScout IDOR Vulnerability: PERM_EDIT_USERS allows modifying any user's notification subscriptions (incomplete fix of CVE-2025-48472) CWE-863 5.4 Medium 2026-05-07
CVE-2026-41194 FreeScout's Mailbox OAuth disconnect uses a state-changing GET and is CSRFable CWE-352 5.4 Medium 2026-04-21

All 90 known CVE vulnerabilities affecting freescout with full Chinese analysis, references, and POCs where available.