CVE WATCH / VULNERABILITY DETAIL

CVE-2026-62850

MEDIUMCVSS 5.3NVD feed

Published 6 November 2026 · tracked since 7 November 2026

Description

FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.225, the administrative tools.php maintenance endpoint is reachable without an appropriate authentication or access-control boundary. Response differences for attacker-controlled path values disclose whether arbitrary directories

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools