Vendor
freescout-help-desk
- CVEs tracked · all time
- 2
- in CISA KEV · all time
- 0
- articles · since 11 Sep
- 0
- articles · all time
- 2
No articles in the last 45 daysThe latest: Infosecurity, Thu 5 Mar, 11:28 UTC.See the full timeline
Products: freescout
CVEs
2 CVEsCVE-2026-27636FreeScout: Missing .htaccess in Restricted File Extensions Allows Remote Code Execution on ApacheCVSSUnrated–Not in KEV2.2%EPSS2articles
CVE-2026-28289FreeScout 1.8.206 Patch Bypass for CVE-2026-27636 via Zero-Width Space Character Leads to Remote Code ExecutionCVSSUnrated–Not in KEV35%EPSS1article
- FreeScout CVE-2026-28289 enables zero click RCE via crafted emailInfosecurity
- FreeScout CVE-2026-28289 enables unauth RCE via TOCTOU bypassSecurityWeek · first in our coverage