CVE-2026-34442

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.211, host header manipulation in FreeScout version (http://localhost:8080/system/status) allows an attacker to inject an arbitrary domain into generated absolute URLs. This leads to External Resource Loading and Open Redirect behavior. When the application constructs links and assets using the unvalidated Host header, user requests can be redirected to attacker-controlled domains and external resources may be loaded from malicious servers. This issue has been patched in version 1.8.211.

• CWE-20
• CWE-601
• CWE-829
• CWE-601

• https://github.com/freescout-help-desk/freescout/commit/889d75c8e3c15e6a7ddb6a4d4f65cc0379c29213Patch
• https://github.com/freescout-help-desk/freescout/releases/tag/1.8.211Release Notes
• https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-822g-7rw5-53xjExploit, Vendor Advisory
• https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-822g-7rw5-53xjExploit, Vendor Advisory

Published

Mar 31, 2026

Last Modified

Jul 24, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-34426OpenClaw versions prior to commit b57b680 contain an approva…7.3
• CVE-2026-34427Vvveb prior to 1.0.8.1 contains a privilege escalation vulne…8.8
• CVE-2026-34428Vvveb prior to 1.0.8.1 contains a server-side request forger…8.3
• CVE-2026-34429Vvveb prior to 1.0.8.1 contains a stored cross-site scriptin…5.4
• CVE-2026-34430ByteDance DeerFlow versions prior to commit 92c7a20 contain …9.6
• CVE-2026-34441cpp-httplib is a C++11 single-file header-only cross platfor…6.5
• CVE-2026-34443FreeScout is a free help desk and shared inbox built with PH…5.3
• CVE-2026-34444Lupa integrates the runtimes of Lua or LuaJIT2 into CPython.…10
• CVE-2026-34445Open Neural Network Exchange (ONNX) is an open standard for …8.6
• CVE-2026-34446Open Neural Network Exchange (ONNX) is an open standard for …5.5
• CVE-2026-34447Open Neural Network Exchange (ONNX) is an open standard for …5.5
• CVE-2026-34448SiYuan is a personal knowledge management system. Prior to v…9