CVE-2026-40497 - Vulnerability Analysis

Overview

FreeScout < 1.8.213 contains a broken authentication caused by incomplete sanitization of mailbox signature allowing CSS injection via <style> tags, letting attackers with mailbox settings privilege escalate to admin by exfiltrating CSRF tokens, exploit requires mailbox settings access.

Severity & Score

Impact

Attackers with mailbox settings access can escalate privileges to admin by stealing CSRF tokens, enabling full account takeover and state-changing actions.

Mitigation

Update to version 1.8.213 or later.

References

• https://github.com/freescout-help-desk/freescout/commit/5aa8d633216f65995e80a7d4a921b784acc94df4
• https://github.com/freescout-help-desk/freescout/releases/tag/1.8.213
• https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-fh99-wr77-pxq3

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner