Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, attachment download tokens are generated using a weak and predictable formula: `md5(APP_KEY + attachment_id + size)`. Since attachment_id is sequential and size can be brute-forced in a small range, an unauthenticated attacker can forge valid tokens and download any private attachment without credentials. Version 1.8.213 fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-21 | 1 | Disclosure1 |
| 2026-04-24 | 1 | General1 |
Don't overlook the middleware layer. New CVEs in PJSIP (CVE-2026-40892) and FreeScout (CVE-2026-40496) highlight how legacy communication and help desk libraries remain prime targets for lateral movement in enterprise environments.
Post summary
The post announces new CVEs in PJSIP and FreeScout, noting their potential for lateral movement in enterprises, but offers no technical, exploit, or remediation details.
CVE-2026-40496 FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, attachment download tokens are generated using a weak and predictable formula:… https://www.cve.org/CVERecord?id=CVE-2026-40496
Post summary
A new vulnerability (CVE-2026-40496) in FreeScout’s attachment token logic has been disclosed, noting that pre‑1.8.213 tokens use a weak, predictable generation method.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | freescout | freescout | - | - | - |