| Reporter | Title | Published | Views | Family All 9 |
|---|---|---|---|---|
 | CVE-2026-40566 | 21 Apr 202616:04 | – | attackerkb |
 | FreeScout 安全漏洞 | 21 Apr 202600:00 | – | cnnvd |
 | CVE-2026-40566 FreeScout vulnerable to SSRF via IMAP/SMTP Connection Test Endpoints | 21 Apr 202616:04 | – | cvelist |
 | EUVD-2026-24167 | 21 Apr 202616:04 | – | euvd |
 | CVE-2026-40566 | 21 Apr 202617:16 | – | nvd |
 | PT-2026-34010 | 21 Apr 202600:00 | – | ptsecurity |
 | CVE-2026-40566: Server-Side Request Forgery (SSRF) | 21 Apr 202600:00 | – | rapid7 |
 | CVE-2026-40566 | 5 Jun 202619:27 | – | redhatcve |
 | CVE-2026-40566 FreeScout vulnerable to SSRF via IMAP/SMTP Connection Test Endpoints | 21 Apr 202616:04 | – | vulnrichment |
[
{
"vendor": "freescout-help-desk",
"product": "freescout",
"versions": [
{
"version": "< 1.8.213",
"status": "affected"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| in_server | request body | /mailboxes/fetch_test | SSRF in FreeScout Mailboxes fetch_test endpoint allowing admin-configured target host/port to be connected to via fsockopen/IMAP client, enabling internal network reachability checks and potential fingerprinting. | CWE-918 |
| in_port | request body | /mailboxes/fetch_test | SSRF in FreeScout Mailboxes fetch_test endpoint allowing admin-configured target host/port to be connected to via fsockopen/IMAP client, enabling internal network reachability checks and potential fingerprinting. | CWE-918 |
| out_server | request body | /mailboxes/fetch_test | SSRF in FreeScout Mailboxes fetch_test endpoint allowing admin-configured target host/port to be connected to via fsockopen/IMAP client, enabling internal network reachability checks and potential fingerprinting. | CWE-918 |
| out_port | request body | /mailboxes/fetch_test | SSRF in FreeScout Mailboxes fetch_test endpoint allowing admin-configured target host/port to be connected to via fsockopen/IMAP client, enabling internal network reachability checks and potential fingerprinting. | CWE-918 |
| in_server | request body | /mailboxes/send_test | SSRF in FreeScout Mailboxes send_test endpoint enabling admin-configured target connections to internal services through fsockopen/SMTP client. | CWE-918 |
| in_port | request body | /mailboxes/send_test | SSRF in FreeScout Mailboxes send_test endpoint enabling admin-configured target connections to internal services through fsockopen/SMTP client. | CWE-918 |
| out_server | request body | /mailboxes/send_test | SSRF in FreeScout Mailboxes send_test endpoint enabling admin-configured target connections to internal services through fsockopen/SMTP client. | CWE-918 |
| out_port | request body | /mailboxes/send_test | SSRF in FreeScout Mailboxes send_test endpoint enabling admin-configured target connections to internal services through fsockopen/SMTP client. | CWE-918 |
| in_server | request body | /mailboxes/imap_folders | SSRF in FreeScout Mailboxes imap_folders action causing connections to attacker-specified target to enumerate IMAP folders or fingerprint services. | CWE-918 |
| in_port | request body | /mailboxes/imap_folders | SSRF in FreeScout Mailboxes imap_folders action causing connections to attacker-specified target to enumerate IMAP folders or fingerprint services. | CWE-918 |
10
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 10:45Current
5.9Medium risk
Vulners AI Score5.9
CVSS 3.14.1
EPSS0.00398
SSVC