https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T13:49:10.901098+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-39384 CVE-2026-39384 — FreeScout Customer Merge Cross-Mailbox Authorization Bypass 2026-10-06T13:49:10.917306+00:00

Affected: freescout-help-desk freescout

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.212, FreeScout does not take the limit_user_customer_visibility parameter into account when merging customers. This vulnerability is fixed in 1.8.212.