CVE-2026-85742

FreeScout is a self-hosted help desk and shared mailbox.

FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.230, a pre-authenticated attacker can place HTML in a failed-login email value that is copied through monitored user activity into a queued SendAlert job. If alert delivery fails, the serialized payload is stored in failed_jobs and the administrator job-details endpoint renders it after a blacklist sanitizer that leaves executable event-handler attributes. When an administrator opens…

6. Nov 2026

Ausgewertete Quellen

• NVD
  CVE-2026-85742