Freescout

This hub aggregates every CVE we track for Freescout, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Freescout.

• CVE-2026-53596FreeScout has unrestricted file upload without rate limiting that leads to resource exhaustion (DoS)5.3Jul 20, 2026
• CVE-2026-53595FreeScout vulnerable to anonymous account takeover via /user-setup empty invite_hash on MySQL9.4Jul 20, 2026
• CVE-2026-53594FreeScout has Arbitrary File Read in App Logs Viewer via Forged Encrypted Path4.9Jul 20, 2026
• CVE-2026-53593FreeScout Vulnerable to Authenticated Remote Code Execution via incomplete upload extension denylist (.pht) — bypass of CVE-2025-484718.8Jul 20, 2026
• CVE-2026-53592FreeScout vulnerable to prototype pollution in getQueryParam4.6Jul 20, 2026
• CVE-2026-53591FreeScout Vulnerable to Unauthenticated Conversation Thread Injection via HMAC Length Bypass in FetchEmails8.6Jul 20, 2026
• CVE-2026-48812FreeScout Allows Unauthenticated Access to Legacy Attachment Files7.5Jul 20, 2026
• CVE-2026-45295FreeScout Vulnerable to Unauthenticated Thread Read-Status Manipulation and Conversation Enumeration via Open Tracking Endpoint6.5Jul 20, 2026
• CVE-2026-45294FreeScout: User Account Enumeration via Password Reset Response Differentiation5.3May 29, 2026
• CVE-2026-47123FreeScout: Agent Impersonation via Missing HMAC Verification on Notification Reply Message-ID Path7.5May 29, 2026
• CVE-2026-48810FreeScout: Thread Edit Authorization Bypass via Missing Mailbox Check4.3May 29, 2026
• CVE-2026-48811FreeScout: Thread Deletion Bypasses Mailbox Access Revocation4.3May 29, 2026
• CVE-2026-41906FreeScout: Conversation Change-Customer Cross-Mailbox Authorization Bypass7.1May 7, 2026
• CVE-2026-41905FreeScout vulnerable to SSRF via Helper::sanitizeRemoteUrl: redirect destination not re-validated, allowing internal HTTP / cloud-metadata access7.7May 7, 2026
• CVE-2026-41904FreeScout Stored XSS vulnerability in mailbox auto-reply: payload reaches every customer's email client (no CSP), bypassing strip_tags validator with mixed text+HTML content7.6May 7, 2026