CVE-2026-48812

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.221, FreeScout's attachment download route skips token authentication for any attachment whose `token_type` is set to `1` (`TOKEN_TYPE_LEGACY`). Because this route is unauthenticated and the file path is deterministic, an unauthenticated remote attacker can download any attachment that was created by an older version of FreeScout without possessing a valid token or session. Version 1.8.221 contains a fix.

• CWE-287

• https://github.com/freescout-help-desk/freescout/commit/215241ee2eb73eaa3b47e392599c7dc1b427dc7e
• https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-wg74-ww4w-2qpc
• https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-wg74-ww4w-2qpc

Published

Jul 20, 2026

Last Modified

Jul 21, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-48807Twig is a template language for PHP. Prior to 3.27.0, the sa…9.1
• CVE-2026-48808Twig is a template language for PHP. Prior to 3.27.0, the co…7.5
• CVE-2026-48809python-engineio is a Python implementation of the Engine.IO …7.5
• CVE-2026-4881In affected versions of Octopus Server, permissions were not…6.5
• CVE-2026-48810FreeScout is a free help desk and shared inbox built with PH…4.3
• CVE-2026-48811FreeScout is a free help desk and shared inbox built with PH…4.3
• CVE-2026-48813Flawfinder is a a static analysis tool for finding vulnerabi…8.7
• CVE-2026-48814Network-AI is a TypeScript/Node.js multi-agent orchestrator.…9.1
• CVE-2026-48815sigstore-js provides JavaScript libraries for interacting wi…7.5
• CVE-2026-48816sigstore-js provides JavaScript libraries for interacting wi…6.5
• CVE-2026-48817Starlette is a lightweight ASGI framework/toolkit. In versio…5.3
• CVE-2026-48818Starlette is a lightweight ASGI framework/toolkit. In versio…7.5