FR
Product
freescout
74
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 10High 28Medium 34Low 2
Watch
Add freescout to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-32753 | 5.4 | Mar 19 | FreeScout: Stored XSS through SVG file upload with filter bypass Affected: < 1.8.209 |
| CVE-2025-48488 | 5.4 | May 30 | FreeScout Vulnerable to Stored XSS Affected: < 1.8.180 |
| CVE-2025-48875 | 5.4 | May 30 | FreeScout Vulnerable to Stored XSS Affected: < 1.8.181 |
| CVE-2025-48486 | 5.4 | May 30 | FreeScout Vulnerable to Stored XSS Affected: < 1.8.180 |
| CVE-2025-48485 | 5.4 | May 30 | FreeScout Vulnerable to Stored XSS Affected: < 1.8.180 |
| CVE-2025-48484 | 5.4 | May 30 | FreeScout Vulnerable to Stored XSS Affected: < 1.8.178 |
| CVE-2025-48483 | 5.4 | May 30 | FreeScout Stored XSS leads to CSRF Affected: < 1.8.180 |
| CVE-2026-53596 | 5.3 | Jul 20 | FreeScout has unrestricted file upload without rate limiting that leads to resource exhaustion (DoS) Affected: < 1.8.224 |
| CVE-2026-45294 | 5.3 | May 29 | FreeScout: User Account Enumeration via Password Reset Response Differentiation Affected: < 1.8.219 |
| CVE-2026-34443 | 5.3 | Mar 31 | FreeScout: SSRF protection bypass via broken CIDR check in checkIpByMask() Affected: < 1.8.211 |
| CVE-2026-53594 | 4.9 | Jul 20 | FreeScout has Arbitrary File Read in App Logs Viewer via Forged Encrypted Path Affected: < 1.8.224 |
| CVE-2025-48478 | 4.9 | May 30 | FreeScout Has Business Logic Errors Affected: < 1.8.180 |
| CVE-2025-48489 | 4.8 | May 30 | FreeScout Vulnerable to Stored XSS Affected: < 1.8.180 |
| CVE-2025-48487 | 4.8 | May 30 | FreeScout Vulnerable to Stored XSS Affected: < 1.8.180 |
| CVE-2026-53592 | 4.6 | Jul 20 | FreeScout vulnerable to prototype pollution in getQueryParam Affected: < 1.8.223 |
| CVE-2026-48810 | 4.3 | May 29 | FreeScout: Thread Edit Authorization Bypass via Missing Mailbox Check Affected: < 1.8.221 |
| CVE-2026-48811 | 4.3 | May 29 | FreeScout: Thread Deletion Bypasses Mailbox Access Revocation Affected: < 1.8.221 |
| CVE-2026-41183 | 4.3 | Apr 21 | FreeScout allows non-folder conversation queries to disclose assigned-only hidden conversations Affected: < 1.8.215 |
| CVE-2026-40590 | 4.3 | Apr 21 | FreeScout's Customer AJAX Create Modifies Hidden Existing Customer Affected: < 1.8.214 |
| CVE-2025-48482 | 4.3 | May 30 | FreeScout Has Business Logic Errors Affected: < 1.8.180 |
| CVE-2025-48473 | 4.3 | May 29 | FreeScout Vulnerable to Insufficient Authorization Affected: < 1.8.179 |
| CVE-2026-40566 | 4.1 | Apr 21 | FreeScout vulnerable to SSRF via IMAP/SMTP Connection Test Endpoints Affected: < 1.8.213 |
| CVE-2025-48480 | 2.7 | May 30 | FreeScout Has Business Logic Errors Affected: < 1.8.180 |
| CVE-2025-48479 | 2.7 | May 30 | FreeScout Has Business Logic Errors Affected: < 1.8.180 |