PT-2026-38550 · Freescout · Freescout

Whatisproblem · Published 2026-05-07 · Updated 2026-05-08 · CVE-2026-41905

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions FreeScout versions prior to 1.8.217

Description The sanitizeRemoteUrl() function in app/Misc/Helper.php follows HTTP redirects via curlGetLastRedirectedUrl() but re-validates the original URL instead of the final destination. This allows an attacker to provide a URL that passes the initial host check to redirect the application to internal HTTP services, such as cloud metadata, internal APIs, or RFC1918 ranges, which are typically blocked.

Recommendations Update to version 1.8.217.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-41905

Affected Products

Freescout

References · 8

• 🔥 https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-22wf-848c-c856 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-41905 · Security Note
• https://github.com/freescout-help-desk/freescout/releases/tag/1.8.217 · Note
• https://twitter.com/CVEnew/status/2052477953938718972 · Twitter Post
• https://twitter.com/infoflowcloud/status/2052479038657089852 · Twitter Post
• https://t.me/CVEtracker/53005 · Telegram Post
• https://twitter.com/KaitanSecurity/status/2052478592148181137 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2052548159008596351 · Twitter Post