CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 3,089 CVEs published, 233 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
3,089
Show in the list
Critical, last 7 days
233
Show in the list
Healthcare-tagged, last 7 days
9
Show in the list
Known exploited (CISA KEV)
1,762
Show in the list

Showing CVEs that name the product freescout_help_desk:freescout. Show all products

49 CVEs
Showing 1 to 10.
CVESeverityTitlePublished
CVE-2026-107393Medium 6.1FreeScout: Stored HTML Injection in Administrator Alert Emails via Spoofed CF-Connecting-IP Header
Assigned by GitHub_M
Oct 8, 2026
CVE-2026-53596Medium 5.3FreeScout has unrestricted file upload without rate limiting that leads to resource exhaustion (DoS)
Assigned by GitHub_M
Jul 20, 2026
CVE-2026-53595Critical 9.4FreeScout vulnerable to anonymous account takeover via /user-setup empty invite_hash on MySQL
Assigned by GitHub_M
Jul 20, 2026
CVE-2026-53594Medium 4.9FreeScout has Arbitrary File Read in App Logs Viewer via Forged Encrypted Path
Assigned by GitHub_M
Jul 20, 2026
CVE-2026-53593High 8.8FreeScout Vulnerable to Authenticated Remote Code Execution via incomplete upload extension denylist (.pht) — bypass of CVE-2025-48471
Assigned by GitHub_M
Jul 20, 2026
CVE-2026-53592Medium 4.6FreeScout vulnerable to prototype pollution in getQueryParam
Assigned by GitHub_M
Jul 20, 2026
CVE-2026-53591High 8.6FreeScout Vulnerable to Unauthenticated Conversation Thread Injection via HMAC Length Bypass in FetchEmails
Assigned by GitHub_M
Jul 20, 2026
CVE-2026-48812High 7.5FreeScout Allows Unauthenticated Access to Legacy Attachment Files
Assigned by GitHub_M
Jul 20, 2026
CVE-2026-45295Medium 6.5FreeScout Vulnerable to Unauthenticated Thread Read-Status Manipulation and Conversation Enumeration via Open Tracking Endpoint
Assigned by GitHub_M
Jul 20, 2026
CVE-2026-45294Medium 5.3FreeScout: User Account Enumeration via Password Reset Response Differentiation
Assigned by GitHub_M
May 29, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.