Browse CVEs

CRITICAL 9.8 CVE-2026-40498 FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, an unauthenticated attacker can access diagnostic and system … Freescout 1.8.213+ Fix from $2,3002026-04-21 MEDIUM 6.1 CVE-2026-40565 FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, FreeScout's linkify() function in app/Misc/Helper.php convert… Freescout 1.8.213+ Fix from $1,6002026-04-21 HIGH 8.1 CVE-2026-40497 FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, FreeScout's `Helper::stripDangerousTags()` removes `<script>`… Freescout 1.8.213+ Fix from $1,9502026-04-21 CRITICAL 9.1 CVE-2026-40496 FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, attachment download tokens are generated using a weak and pre… Freescout 1.8.213+ Fix from $2,3002026-04-21 HIGH 7.6 CVE-2026-39384 FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.212, FreeScout does not take the limit_user_customer_… Freescout 1.8.212+ Fix from $1,9502026-04-07 MEDIUM 6.5 CVE-2026-35584 FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.212, the endpoint GET /thread/read/{conversation_id}/… Freescout 1.8.212+ Fix from $1,6002026-04-07 MEDIUM 6.1 CVE-2026-34442 FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.211, host header manipulation in FreeScout ve… Freescout 1.8.211+ Fix from $1,6002026-03-31 MEDIUM 5.3 CVE-2026-34443 FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.211, checkIpByMask() in app/Misc/Helper.php c… Freescout 1.8.211+ Fix from $1,6002026-03-31 CRITICAL 9.3 CVE-2026-32754 FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Versions 1.8.208 and below are vulnerable to Stored Cross-Site Scr… Freescout 1.8.209+ Fix from $2,3002026-03-19 HIGH 8.1 CVE-2026-32752 FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. In versions 1.8.208 and below, the ThreadPolicy::edit() method con… Freescout 1.8.209+ Fix from $1,9502026-03-19 MEDIUM 5.4 CVE-2026-32753 FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. In versions 1.8.208 and below, bypasses of the attachment view log… Freescout 1.8.209+ Fix from $1,6002026-03-19 HIGH 8.1 CVE-2026-28289EPSS 31% FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. A patch bypass vulnerability for CVE-2026-27636 in FreeScout 1.8.2… Freescout 1.8.207+ Fix from $1,9502026-03-03 CRITICAL 9.8 CVE-2026-27637 FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.206, FreeScout's `TokenAuth` middleware uses … Freescout 1.8.206+ Fix from $2,3002026-02-25 HIGH 8.8 CVE-2026-27636 FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.206, FreeScout's file upload restriction list… Freescout 1.8.206+ Fix from $1,9502026-02-25 HIGH 8.8 CVE-2025-58163 FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Versions 1.8.185 and earlier contain a deserialization of untruste… Freescout 1.8.186+ Fix from $1,9502025-09-03 HIGH 8.8 CVE-2025-54366 FreeScout is a lightweight free open source help desk and shared inbox built with PHP (Laravel framework). In versions 1.8.185 and below, there is a … Freescout 1.8.86+ Fix from $1,9502025-07-26 MEDIUM 6.6 CVE-2025-48880 FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.181, when an administrative account is a deleting a user, there is… Freescout 1.8.181+ Fix from $1,6002025-05-30 MEDIUM 5.4 CVE-2025-48875 FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.181, the system's incorrect validation of last_name and first_name… Freescout 1.8.181+ Fix from $1,6002025-05-30 MEDIUM 5.4 CVE-2025-48486 FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the cross-site scripiting (XSS) vulnerability is caused by th… Freescout 1.8.180+ Fix from $1,6002025-05-30 MEDIUM 5.4 CVE-2025-48488 FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, deleting the file .htaccess allows an attacker to upload an H… Freescout 1.8.180+ Fix from $1,6002025-05-30 MEDIUM 5.4 CVE-2025-48485 FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the application is vulnerable to Cross-Site Scripting (XSS) a… Freescout 1.8.180+ Fix from $1,6002025-05-30 MEDIUM 5.4 CVE-2025-48483 FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the application is vulnerable to Cross-Site Scripting (XSS) a… Freescout 1.8.180+ Fix from $1,6002025-05-30 MEDIUM 5.4 CVE-2025-48484 FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.178, the application is vulnerable to Cross-Site Scripting (XSS) a… Freescout 1.8.178+ Fix from $1,6002025-05-30 CRITICAL 9.8 CVE-2025-48481 FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, an attacker with an unactivated email invitation containing i… Freescout 1.8.180+ Fix from $2,3002025-05-30 HIGH 8.1 CVE-2025-48477 FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the application's logic requires the user to perform a correc… Freescout 1.8.180+ Fix from $1,9502025-05-30 HIGH 8.8 CVE-2025-48476 FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, when adding and editing user records using the fill() method,… Freescout 1.8.180+ Fix from $1,9502025-05-30 HIGH 8.1 CVE-2025-48475 FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the System does not provide a check on which "clients" of the… Freescout 1.8.180+ Fix from $1,9502025-05-29 HIGH 8.1 CVE-2025-48474 FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the application incorrectly checks user access rights for con… Freescout 1.8.180+ Fix from $1,9502025-05-29 CRITICAL 9.8 CVE-2025-48471 FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.179, the application does not check or performs insufficient check… Freescout 1.8.179+ Fix from $2,3002025-05-29 HIGH 8.1 CVE-2025-48472 FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.179, there is no check to ensure that the user is disabling notifi… Freescout 1.8.179+ Fix from $1,9502025-05-29