Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, the `load_customer_info` action in `POST /conversation/ajax` returns complete customer profile data to any authenticated user without verifying mailbox access. An attacker only needs a valid email address to retrieve all customer PII. Version 1.8.213 fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-40570 FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, the `load_customer_info` action in `POST /conversation/ajax` returns complete … https://www.cve.org/CVERecord?id=CVE-2026-40570
Post summary
The post references CVE-2026-40570 and notes a related endpoint in FreeScout, but provides no further technical, exploit, or remediation details.
🚨*CVE* CVE-2026-40570 FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, the `load_customer_info` action in `POST /conversation/ajax` returns complete … https://www.cve.org/CVERecord?id=CVE-2026-40570 ----- Traducción: CVE-2026-40570 Fre… http://infoflow.cloud`
Post summary
The tweet merely announces CVE‑2026‑40570 with minimal technical detail and a link to the official CVE record, without any evidence of exploitation, PoC, or mitigation.