Skip to content
OpenAdvisories

Vendor

freescout-help-desk

91 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-27636 Public exploit

    FreeScout: Missing .htaccess in Restricted File Extensions Allows Remote Code Execution on Apache

    FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.206, FreeScout's file upload restriction list in `app/Misc/Helper.php` does not include `.htaccess` or `.user.ini` files. On Apache servers with `AllowOver…