{"schema_version":1,"title":"FreeScout vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 16 vulnerabilities in FreeScout: 11 in the last 7 days and 12 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-85742, was published on 6 November 2026. 11 vulnerabilities in the last four weeks, up 1000% on the four before (1).","url":"https://junglewise.ai/threats/technologies/freescout-freescout","json_url":"https://junglewise.ai/threats/technologies/freescout-freescout.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/freescout-freescout","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":6,"all_time":16,"critical":2,"exploited":0,"last_7_days":11,"last_30_days":11,"last_90_days":12,"last_365_days":16},"latest":[{"cve":"CVE-2026-85742","cvss":7.5,"slug":"cve-2026-85742-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout stored XSS in job details page","severity":"high","exploited":false,"published_at":"2026-11-06T18:18:21.143+00:00","url":"https://junglewise.ai/threats/cve-2026-85742-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-85744","cvss":5.4,"slug":"cve-2026-85744-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout authorization bypass in conversation merge","severity":"medium","exploited":false,"published_at":"2026-11-06T17:20:02.77+00:00","url":"https://junglewise.ai/threats/cve-2026-85744-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-85743","cvss":8.2,"slug":"cve-2026-85743-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout SSRF in remote download and port check","severity":"high","exploited":false,"published_at":"2026-11-06T17:20:02.567+00:00","url":"https://junglewise.ai/threats/cve-2026-85743-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-62856","cvss":7.7,"slug":"cve-2026-62856-freescout-is-a-self-hosted-help-desk-and-shared-mailbox","title":"FreeScout SQL injection in polycast receive endpoint","severity":"high","exploited":false,"published_at":"2026-11-06T17:18:34.047+00:00","url":"https://junglewise.ai/threats/cve-2026-62856-freescout-is-a-self-hosted-help-desk-and-shared-mailbox"},{"cve":"CVE-2026-62855","cvss":4.4,"slug":"cve-2026-62855-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout path traversal in App Logs viewer","severity":"medium","exploited":false,"published_at":"2026-11-06T17:18:33.877+00:00","url":"https://junglewise.ai/threats/cve-2026-62855-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-62854","cvss":7.6,"slug":"cve-2026-62854-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout stored XSS in mailbox signature via nested tag bypass","severity":"high","exploited":false,"published_at":"2026-11-06T17:18:33.7+00:00","url":"https://junglewise.ai/threats/cve-2026-62854-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-62852","cvss":6.5,"slug":"cve-2026-62852-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout authorization bypass in RealtimeConvNewThread","severity":"medium","exploited":false,"published_at":"2026-11-06T17:18:33.537+00:00","url":"https://junglewise.ai/threats/cve-2026-62852-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-62851","cvss":4.3,"slug":"cve-2026-62851-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout conversation search access control bypass","severity":"medium","exploited":false,"published_at":"2026-11-06T17:18:33.353+00:00","url":"https://junglewise.ai/threats/cve-2026-62851-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-62850","cvss":5.3,"slug":"cve-2026-62850-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout tools.php authentication bypass and credential enumeration","severity":"medium","exploited":false,"published_at":"2026-11-06T17:18:33.157+00:00","url":"https://junglewise.ai/threats/cve-2026-62850-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-103985","cvss":7.1,"slug":"cve-2026-103985-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout privilege escalation in profile form","severity":"high","exploited":false,"published_at":"2026-11-06T17:17:10.887+00:00","url":"https://junglewise.ai/threats/cve-2026-103985-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-103984","cvss":6.5,"slug":"cve-2026-103984-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout authorization bypass in load_customer_info","severity":"medium","exploited":false,"published_at":"2026-11-06T17:17:10.71+00:00","url":"https://junglewise.ai/threats/cve-2026-103984-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-107393","cvss":6.1,"epss":0.0019,"slug":"cve-2026-107393-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout stored XSS in admin alert email via spoofed CF-Connecting-IP","severity":"medium","exploited":false,"published_at":"2026-10-08T20:17:33.893+00:00","url":"https://junglewise.ai/threats/cve-2026-107393-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-40565","cvss":6.1,"epss":0.002,"slug":"cve-2026-40565-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox","title":"FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, FreeScout's linkify() function…","severity":"medium","exploited":false,"published_at":"2026-04-21T16:16:20.39+00:00","url":"https://junglewise.ai/threats/cve-2026-40565-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox"},{"cve":"CVE-2026-40498","cvss":9.8,"epss":0.0057,"slug":"cve-2026-40498-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox","title":"FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, an unauthenticated attacker…","severity":"critical","exploited":false,"published_at":"2026-04-21T16:16:20.24+00:00","url":"https://junglewise.ai/threats/cve-2026-40498-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox"},{"cve":"CVE-2026-40497","cvss":8.1,"epss":0.0024,"slug":"cve-2026-40497-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox","title":"FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, FreeScout's…","severity":"high","exploited":false,"published_at":"2026-04-21T03:16:08.403+00:00","url":"https://junglewise.ai/threats/cve-2026-40497-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox"},{"cve":"CVE-2026-40496","cvss":9.1,"epss":0.004,"slug":"cve-2026-40496-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox","title":"FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, attachment download tokens are…","severity":"critical","exploited":false,"published_at":"2026-04-21T02:16:08.35+00:00","url":"https://junglewise.ai/threats/cve-2026-40496-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":11},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"FreeScout","slug":"freescout-freescout","vendor":{"hub":true,"name":"FreeScout","slug":"freescout","url":"https://junglewise.ai/threats/vendors/freescout"},"aliases":[],"category":"help-desk","homepage":"https://freescout.net","repo_url":"https://github.com/freescout-net/freescout","description":"FreeScout is an open-source help desk and customer support platform.","url":"https://junglewise.ai/threats/technologies/freescout-freescout"},"most_severe":[{"cve":"CVE-2026-40498","cvss":9.8,"epss":0.0057,"slug":"cve-2026-40498-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox","title":"FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, an unauthenticated attacker…","severity":"critical","exploited":false,"published_at":"2026-04-21T16:16:20.24+00:00","url":"https://junglewise.ai/threats/cve-2026-40498-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox"},{"cve":"CVE-2026-40496","cvss":9.1,"epss":0.004,"slug":"cve-2026-40496-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox","title":"FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, attachment download tokens are…","severity":"critical","exploited":false,"published_at":"2026-04-21T02:16:08.35+00:00","url":"https://junglewise.ai/threats/cve-2026-40496-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox"},{"cve":"CVE-2026-85743","cvss":8.2,"slug":"cve-2026-85743-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout SSRF in remote download and port check","severity":"high","exploited":false,"published_at":"2026-11-06T17:20:02.567+00:00","url":"https://junglewise.ai/threats/cve-2026-85743-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-40497","cvss":8.1,"epss":0.0024,"slug":"cve-2026-40497-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox","title":"FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, FreeScout's…","severity":"high","exploited":false,"published_at":"2026-04-21T03:16:08.403+00:00","url":"https://junglewise.ai/threats/cve-2026-40497-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox"},{"cve":"CVE-2026-62856","cvss":7.7,"slug":"cve-2026-62856-freescout-is-a-self-hosted-help-desk-and-shared-mailbox","title":"FreeScout SQL injection in polycast receive endpoint","severity":"high","exploited":false,"published_at":"2026-11-06T17:18:34.047+00:00","url":"https://junglewise.ai/threats/cve-2026-62856-freescout-is-a-self-hosted-help-desk-and-shared-mailbox"},{"cve":"CVE-2026-62854","cvss":7.6,"slug":"cve-2026-62854-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout stored XSS in mailbox signature via nested tag bypass","severity":"high","exploited":false,"published_at":"2026-11-06T17:18:33.7+00:00","url":"https://junglewise.ai/threats/cve-2026-62854-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-85742","cvss":7.5,"slug":"cve-2026-85742-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout stored XSS in job details page","severity":"high","exploited":false,"published_at":"2026-11-06T18:18:21.143+00:00","url":"https://junglewise.ai/threats/cve-2026-85742-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-103985","cvss":7.1,"slug":"cve-2026-103985-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout privilege escalation in profile form","severity":"high","exploited":false,"published_at":"2026-11-06T17:17:10.887+00:00","url":"https://junglewise.ai/threats/cve-2026-103985-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-62852","cvss":6.5,"slug":"cve-2026-62852-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout authorization bypass in RealtimeConvNewThread","severity":"medium","exploited":false,"published_at":"2026-11-06T17:18:33.537+00:00","url":"https://junglewise.ai/threats/cve-2026-62852-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-103984","cvss":6.5,"slug":"cve-2026-103984-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout authorization bypass in load_customer_info","severity":"medium","exploited":false,"published_at":"2026-11-06T17:17:10.71+00:00","url":"https://junglewise.ai/threats/cve-2026-103984-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"}],"generated_at":"2026-11-12T00:07:00.154427+00:00"}