{"schema_version":1,"title":"FreeScout vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 20 vulnerabilities in FreeScout: 11 in the last 7 days and 12 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-85742, was published on 6 November 2026. 11 vulnerabilities in the last four weeks, up 1000% on the four before (1). 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/freescout","json_url":"https://junglewise.ai/threats/vendors/freescout.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/freescout","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":7,"all_time":20,"critical":2,"exploited":0,"last_7_days":11,"last_30_days":11,"last_90_days":12,"last_365_days":20},"latest":[{"cve":"CVE-2026-85742","cvss":7.5,"slug":"cve-2026-85742-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout stored XSS in job details page","severity":"high","exploited":false,"published_at":"2026-11-06T18:18:21.143+00:00","url":"https://junglewise.ai/threats/cve-2026-85742-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-85744","cvss":5.4,"slug":"cve-2026-85744-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout authorization bypass in conversation merge","severity":"medium","exploited":false,"published_at":"2026-11-06T17:20:02.77+00:00","url":"https://junglewise.ai/threats/cve-2026-85744-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-85743","cvss":8.2,"slug":"cve-2026-85743-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout SSRF in remote download and port check","severity":"high","exploited":false,"published_at":"2026-11-06T17:20:02.567+00:00","url":"https://junglewise.ai/threats/cve-2026-85743-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-62856","cvss":7.7,"slug":"cve-2026-62856-freescout-is-a-self-hosted-help-desk-and-shared-mailbox","title":"FreeScout SQL injection in polycast receive endpoint","severity":"high","exploited":false,"published_at":"2026-11-06T17:18:34.047+00:00","url":"https://junglewise.ai/threats/cve-2026-62856-freescout-is-a-self-hosted-help-desk-and-shared-mailbox"},{"cve":"CVE-2026-62855","cvss":4.4,"slug":"cve-2026-62855-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout path traversal in App Logs viewer","severity":"medium","exploited":false,"published_at":"2026-11-06T17:18:33.877+00:00","url":"https://junglewise.ai/threats/cve-2026-62855-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-62854","cvss":7.6,"slug":"cve-2026-62854-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout stored XSS in mailbox signature via nested tag bypass","severity":"high","exploited":false,"published_at":"2026-11-06T17:18:33.7+00:00","url":"https://junglewise.ai/threats/cve-2026-62854-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-62852","cvss":6.5,"slug":"cve-2026-62852-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout authorization bypass in RealtimeConvNewThread","severity":"medium","exploited":false,"published_at":"2026-11-06T17:18:33.537+00:00","url":"https://junglewise.ai/threats/cve-2026-62852-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-62851","cvss":4.3,"slug":"cve-2026-62851-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout conversation search access control bypass","severity":"medium","exploited":false,"published_at":"2026-11-06T17:18:33.353+00:00","url":"https://junglewise.ai/threats/cve-2026-62851-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-62850","cvss":5.3,"slug":"cve-2026-62850-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout tools.php authentication bypass and credential enumeration","severity":"medium","exploited":false,"published_at":"2026-11-06T17:18:33.157+00:00","url":"https://junglewise.ai/threats/cve-2026-62850-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-103985","cvss":7.1,"slug":"cve-2026-103985-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout privilege escalation in profile form","severity":"high","exploited":false,"published_at":"2026-11-06T17:17:10.887+00:00","url":"https://junglewise.ai/threats/cve-2026-103985-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-103984","cvss":6.5,"slug":"cve-2026-103984-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout authorization bypass in load_customer_info","severity":"medium","exploited":false,"published_at":"2026-11-06T17:17:10.71+00:00","url":"https://junglewise.ai/threats/cve-2026-103984-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-107393","cvss":6.1,"epss":0.0019,"slug":"cve-2026-107393-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout stored XSS in admin alert email via spoofed CF-Connecting-IP","severity":"medium","exploited":false,"published_at":"2026-10-08T20:17:33.893+00:00","url":"https://junglewise.ai/threats/cve-2026-107393-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-48811","cvss":4.3,"slug":"cve-2026-48811-freescout-missing-authorization-in-internal-note-deletion","title":"FreeScout missing authorization in internal note deletion","severity":"medium","exploited":false,"published_at":"2026-05-29T20:16:29.233+00:00","url":"https://junglewise.ai/threats/cve-2026-48811-freescout-missing-authorization-in-internal-note-deletion"},{"cve":"CVE-2026-48810","cvss":4.3,"slug":"cve-2026-48810-freescout-improper-authorization-in-threadpolicy-edit-method","title":"FreeScout improper authorization in ThreadPolicy edit method","severity":"medium","exploited":false,"published_at":"2026-05-29T20:16:29.083+00:00","url":"https://junglewise.ai/threats/cve-2026-48810-freescout-improper-authorization-in-threadpolicy-edit-method"},{"cve":"CVE-2026-47123","cvss":7.5,"slug":"cve-2026-47123-freescout-agent-impersonation-via-missing-hmac-in-notification","title":"FreeScout agent impersonation via missing HMAC in notification replies","severity":"high","exploited":false,"published_at":"2026-05-29T20:16:28.38+00:00","url":"https://junglewise.ai/threats/cve-2026-47123-freescout-agent-impersonation-via-missing-hmac-in-notification"},{"cve":"CVE-2026-45294","cvss":5.3,"slug":"cve-2026-45294-freescout-account-enumeration-in-password-reset-endpoint","title":"FreeScout account enumeration in password reset endpoint","severity":"medium","exploited":false,"published_at":"2026-05-29T20:16:25.833+00:00","url":"https://junglewise.ai/threats/cve-2026-45294-freescout-account-enumeration-in-password-reset-endpoint"},{"cve":"CVE-2026-40565","cvss":6.1,"epss":0.002,"slug":"cve-2026-40565-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox","title":"FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, FreeScout's linkify() function…","severity":"medium","exploited":false,"published_at":"2026-04-21T16:16:20.39+00:00","url":"https://junglewise.ai/threats/cve-2026-40565-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox"},{"cve":"CVE-2026-40498","cvss":9.8,"epss":0.0057,"slug":"cve-2026-40498-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox","title":"FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, an unauthenticated attacker…","severity":"critical","exploited":false,"published_at":"2026-04-21T16:16:20.24+00:00","url":"https://junglewise.ai/threats/cve-2026-40498-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox"},{"cve":"CVE-2026-40497","cvss":8.1,"epss":0.0024,"slug":"cve-2026-40497-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox","title":"FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, FreeScout's…","severity":"high","exploited":false,"published_at":"2026-04-21T03:16:08.403+00:00","url":"https://junglewise.ai/threats/cve-2026-40497-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox"},{"cve":"CVE-2026-40496","cvss":9.1,"epss":0.004,"slug":"cve-2026-40496-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox","title":"FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, attachment download tokens are…","severity":"critical","exploited":false,"published_at":"2026-04-21T02:16:08.35+00:00","url":"https://junglewise.ai/threats/cve-2026-40496-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox"}],"vendor":{"hub":true,"name":"FreeScout","slug":"freescout","description":"FreeScout is an open-source help desk and customer support platform.","url":"https://junglewise.ai/threats/vendors/freescout"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":11},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-40498","cvss":9.8,"epss":0.0057,"slug":"cve-2026-40498-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox","title":"FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, an unauthenticated attacker…","severity":"critical","exploited":false,"published_at":"2026-04-21T16:16:20.24+00:00","url":"https://junglewise.ai/threats/cve-2026-40498-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox"},{"cve":"CVE-2026-40496","cvss":9.1,"epss":0.004,"slug":"cve-2026-40496-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox","title":"FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, attachment download tokens are…","severity":"critical","exploited":false,"published_at":"2026-04-21T02:16:08.35+00:00","url":"https://junglewise.ai/threats/cve-2026-40496-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox"},{"cve":"CVE-2026-85743","cvss":8.2,"slug":"cve-2026-85743-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout SSRF in remote download and port check","severity":"high","exploited":false,"published_at":"2026-11-06T17:20:02.567+00:00","url":"https://junglewise.ai/threats/cve-2026-85743-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-40497","cvss":8.1,"epss":0.0024,"slug":"cve-2026-40497-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox","title":"FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, FreeScout's…","severity":"high","exploited":false,"published_at":"2026-04-21T03:16:08.403+00:00","url":"https://junglewise.ai/threats/cve-2026-40497-freescout-is-a-free-self-hosted-help-desk-and-shared-mailbox"},{"cve":"CVE-2026-62856","cvss":7.7,"slug":"cve-2026-62856-freescout-is-a-self-hosted-help-desk-and-shared-mailbox","title":"FreeScout SQL injection in polycast receive endpoint","severity":"high","exploited":false,"published_at":"2026-11-06T17:18:34.047+00:00","url":"https://junglewise.ai/threats/cve-2026-62856-freescout-is-a-self-hosted-help-desk-and-shared-mailbox"},{"cve":"CVE-2026-62854","cvss":7.6,"slug":"cve-2026-62854-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout stored XSS in mailbox signature via nested tag bypass","severity":"high","exploited":false,"published_at":"2026-11-06T17:18:33.7+00:00","url":"https://junglewise.ai/threats/cve-2026-62854-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-85742","cvss":7.5,"slug":"cve-2026-85742-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout stored XSS in job details page","severity":"high","exploited":false,"published_at":"2026-11-06T18:18:21.143+00:00","url":"https://junglewise.ai/threats/cve-2026-85742-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-47123","cvss":7.5,"slug":"cve-2026-47123-freescout-agent-impersonation-via-missing-hmac-in-notification","title":"FreeScout agent impersonation via missing HMAC in notification replies","severity":"high","exploited":false,"published_at":"2026-05-29T20:16:28.38+00:00","url":"https://junglewise.ai/threats/cve-2026-47123-freescout-agent-impersonation-via-missing-hmac-in-notification"},{"cve":"CVE-2026-103985","cvss":7.1,"slug":"cve-2026-103985-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout privilege escalation in profile form","severity":"high","exploited":false,"published_at":"2026-11-06T17:17:10.887+00:00","url":"https://junglewise.ai/threats/cve-2026-103985-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"},{"cve":"CVE-2026-62852","cvss":6.5,"slug":"cve-2026-62852-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to","title":"FreeScout authorization bypass in RealtimeConvNewThread","severity":"medium","exploited":false,"published_at":"2026-11-06T17:18:33.537+00:00","url":"https://junglewise.ai/threats/cve-2026-62852-freescout-is-a-self-hosted-help-desk-and-shared-mailbox-prior-to"}],"generated_at":"2026-11-12T03:07:00.164048+00:00","technologies":[{"name":"FreeScout","slug":"freescout-freescout","vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/freescout-freescout"}]}