Exploited: 178
LatestCVE-2026-124040 — CivetWeb through 1.16 HTTP/2 Use-After-Free via Stale Pseudo-Header State
VulnFeed.org
AREN

freescout-help-desk freescout vulnerabilities and fixes

Exploited and high-severity freescout-help-desk freescout vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.

RSS for this product
  1. 7.5CVE-2026-85742FreeScout: Conditional stored admin XSS via failed-job detailsVerify fixfreescout-help-desk freescout
    1 min read
  2. 7.1CVE-2026-103985FreeScout: a restricted agent can lift their own admin-imposed "see only assigned conversations" restriction via profile saveVerify fixfreescout-help-desk freescout
    1 min read
  3. 8.2CVE-2026-85743FreeScout: Server-side request forgery via incomplete outbound host validation and unguarded download sinksVerify fixfreescout-help-desk freescout
    1 min read
  4. 7.7CVE-2026-62856FreeScout: Cross-User Notification Data Disclosure via LIKE Wildcard Injection in Polycast Channel QueryVerify fixfreescout-help-desk freescout
    1 min read
Esc