https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 02:21:32 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-323669 EUVD-2026-323669 https://cve.radiocsirt.org/vuln/euvd-2026-323669 https://cve.radiocsirt.org/vuln/fkie_cve-2026-47123 <p>FreeScout is a free help desk and shared inbox built with PHP&#39;s Laravel framework. Prior to 1.8.220, the email processing pipeline in FreeScout&#39;s FetchEmails command has two code paths for identifying agent (user) replies based on In-Reply-To / References headers. The notification reply path (notify-{thread_id}-{user_id}-...) extracts thread_id and user_id directly from the Message-ID without HMAC verification. An external attacker who can spoof the From address of a helpdesk agent can inject messages that FreeScout processes as legitimate agent replies — which are then automatically forwarded to customers via the legitimate SMTP server. This vulnerability is fixed in 1.8.220.</p> <p>FreeScout is a free help desk and shared inbox built with PHP&#39;s Laravel framework. Prior to 1.8.220, the email processing pipeline in FreeScout&#39;s FetchEmails command has two code paths for identifying agent (user) replies based on In-Reply-To / References headers. The notification reply path (notify-{thread_id}-{user_id}-...) extracts thread_id and user_id directly from the Message-ID without HMAC verification. An external attacker who can spoof the From address of a helpdesk agent can inject messages that FreeScout processes as legitimate agent replies — which are then automatically forwarded to customers via the legitimate SMTP server. This vulnerability is fixed in 1.8.220.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-47123