Vulnerabilities in freescout-help-desk
85 resultsCVE-2026-62850MEDIUMFreeScout: Administrative tools.php endpoint is accessible to low-privileged users, enabling filesystem enumeration and unthrottled brute-force of application secretsEPSS —CVE-2026-62855MEDIUMFreeScout: Path Traversal in App Logs Viewer Exposes Arbitrary Local FilesEPSS —CVE-2026-62852MEDIUMFreeScout: Missing Authorization and Exposure of Sensitive Information to an Unauthorized Actor and Authorization Bypass Through User-Controlled KeyEPSS —CVE-2026-85744MEDIUMFreeScout: Conversation Merge Cross-Mailbox Authorization BypassEPSS —CVE-2026-103985HIGHFreeScout: a restricted agent can lift their own admin-imposed "see only assigned conversations" restriction via profile saveEPSS —