{"id":"CVE-2026-62850","title":"FreeScout: Administrative tools.php endpoint is accessible to low-privileged users, enabling filesystem enumeration and unthrottled brute-force of application secrets","summary":"FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.225, the administrative tools.php maintenance endpoint is reachable without an appropriate authentication or access-control boundary. Response differences for attacker…","severity":"medium","cvss":5.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvssSource":"cna","cwe":["CWE-287","CWE-307","CWE-538"],"vendor":"freescout-help-desk","product":"freescout","affected":["freescout < 1.8.225"],"published":"2026-11-06","updated":"2026-11-06","sourceUpdated":"2026-11-06T17:04:28.448Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-62850","references":[{"url":"https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-w2p9-3666-vw9j","label":"https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-w2p9-3666-vw9j"},{"url":"https://github.com/freescout-help-desk/freescout/commit/8bb0594e95eab6661b4372e94ac02f62a6c3cb28","label":"https://github.com/freescout-help-desk/freescout/commit/8bb0594e95eab6661b4372e94ac02f62a6c3cb28"},{"url":"https://github.com/freescout-help-desk/freescout/releases/tag/1.8.225","label":"https://github.com/freescout-help-desk/freescout/releases/tag/1.8.225"}],"tags":["cve.org"],"ingestedAt":"2026-11-06T18:00:12.571Z","epss":0.00272,"epssPercentile":0.19666,"slug":"CVE-2026-62850","body":"## Overview\n\nFreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.225, the administrative tools.php maintenance endpoint is reachable without an appropriate authentication or access-control boundary. Response differences for attacker-controlled path values disclose whether arbitrary directories and files exist on the server. The same endpoint validates application-key and database-password candidates without rate limiting, per-session throttling, or a CAPTCHA, allowing unrestricted guessing attempts against application secrets. This issue is fixed in version 1.8.225.\n\n## Affected\n\n- `freescout < 1.8.225`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":29,"depthScoreParts":{"impact":29.2,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}