PT-2026-52996 · Freescout · Freescout

CVE-2026-53596

·

Published

2026-05-31

·

Updated

2026-07-20

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions FreeScout versions prior to 1.8.224
Description FreeScout is a help desk and shared inbox application built with the Laravel framework. The application fails to enforce rate limiting on the file upload endpoint, allowing a remote attacker to flood the server with upload requests. This resource exhaustion can lead to database overload and a denial of service for all users.
Recommendations Update to version 1.8.224.

Exploit

Fix

Allocation of Resources Without Limits

Resource Exhaustion

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-770CWE-400

Related Identifiers

BDU:2026-08722
CVE-2026-53596
GHSA-PH4F-2JHX-Q76W

Affected Products

Freescout