SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-53596

MEDIUM · CVSS 5.3 EPSS 0.24% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-20 · Last synced 2026-08-19

CyberRota Analysis

AI-Generated

The FreeScout helpdesk application prior to version 1.8.224 is vulnerable due to the lack of rate limiting on its file upload endpoint, allowing any user to overwhelm the server with excessive upload requests. This can lead to database overload and potential denial of service, impacting all users of the application. Organizations using FreeScout should prioritize upgrading to version 1.8.224 to mitigate this risk.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-53596
Severity
MEDIUM
CVSS
5.3
EPSS
0.24%

Original NVD Description

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.224, the FreeScout helpdesk application does not enforce rate limiting on the file upload endpoint. Any user can flood the server with upload requests, leading to database overload and potential denial of service for all users. Version 1.8.224 contains a fix.