PT-2026-44987 · Freescout · Freescout

Fr0Z863Xf · Published 2026-05-29 · Updated 2026-06-02 · CVE-2026-45294

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions FreeScout versions prior to 1.8.219

Description The password reset endpoint returns visually distinct responses based on whether the submitted email address is associated with an existing user account. This allows unauthenticated attackers to enumerate valid helpdesk agent email addresses.

Recommendations Update to version 1.8.219.

Exploit

Fix

Side Channel Attack

Weakness Enumeration

CWE-203

CWE-204

Related Identifiers

CVE-2026-45294

Affected Products

Freescout

References · 5

• 🔥 https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-jvmv-2qcp-7855 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-45294 · Security Note
• https://t.me/CVEtracker/55297 · Telegram Post
• https://t.me/cveNotify/165587 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2060514947705008626 · Twitter Post