CVE-2026-34442 - Vulnerability Analysis

Overview

FreeScout < 1.8.211 contains an open redirect caused by unvalidated Host header manipulation in URL generation, letting attackers inject arbitrary domains for redirection and external resource loading, exploit requires crafted Host header.

Severity & Score

Impact

Attackers can redirect users to malicious domains and load external resources, facilitating phishing and malicious content delivery.

Mitigation

Update to version 1.8.211 or later.

References

• https://github.com/freescout-help-desk/freescout/commit/889d75c8e3c15e6a7ddb6a4d4f65cc0379c29213
• https://github.com/freescout-help-desk/freescout/releases/tag/1.8.211
• https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-822g-7rw5-53xj

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner