CVE-2026-45295 freescout-help-desk CVE debrief

Who should care

Defenders responsible for FreeScout installations should assess exposure and apply patches to prevent potential enumeration and modification attempts. This includes verifying the FreeScout version in use, reviewing and restricting access to the open tracking endpoint, and monitoring for potential exploitation attempts. Additionally, defenders should consider the potential operational impacts of this vulnerability, including the enumeration of valid and .

Why it matters

CVE-2026-45295 is a medium-severity vulnerability in FreeScout that allows unauthenticated attackers to enumerate and modify thread IDs. Defenders should verify exposure, apply patches, and monitor for potential attempts.

• Potential enumeration of valid conversation and thread IDs
• Modification of thread state by unauthenticated attackers
• Verification of FreeScout version and patch application priority
• Monitoring for potential exploitation attempts

Technical summary

CVE-2026-45295 is a vulnerability in the open tracking endpoint of FreeScout, allowing unauthenticated attackers to enumerate valid conversation and thread IDs and modify thread state. The issue is caused by a lack of proper authentication and authorization controls on the endpoint. The vulnerability is patched in version 1.8.219, which implements necessary checks to prevent unauthorized access and manipulation. Defenders should prioritize verifying exposure and applying patches for FreeScout versions prior to 1.8.219.

Defensive priority

Defenders should prioritize verifying exposure and applying patches for FreeScout versions prior to 1.8.219.

Recommended defensive actions

• Verify FreeScout version and apply patch to version 1.8.219 or later
• Review and restrict access to the open tracking endpoint
• Monitor for potential enumeration and modification attempts
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and NVD entry provide details on the vulnerability and its patch. However, additional information on potential exploitation or impact is limited. Defenders should verify the FreeScout version in use, assess exposure, and apply patches to prevent potential enumeration and modification attempts. The open tracking endpoint's lack of authentication controls is a critical vulnerability that needs immediate attention.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.