Skip to content
OpenAdvisories

Vendor

freescout-help-desk

91 known vulnerabilities.

Products

freescout 90 freescout-helpdesk/freescout 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.4
    CVE-2026-53595 Public exploit Scanner template

    FreeScout vulnerable to anonymous account takeover via /user-setup empty invite_hash on MySQL

    FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.224, the public endpoint `POST /user-setup/{hash}/{invite_sent_at}` (`OpenController@userSetupSave`) selects the target account solely by its `invite_hash`…

    freescout-help-desk freescout
  • Critical 10.0
    CVE-2026-28289 Public exploit EPSS 35%

    FreeScout 1.8.206 Patch Bypass for CVE-2026-27636 via Zero-Width Space Character Leads to Remote Code Execution

    FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. A patch bypass vulnerability for CVE-2026-27636 in FreeScout 1.8.206 and earlier allows any authenticated user with file upload permissions to achieve Remote Code Execution (RC…

    freescout-help-desk freescout