CVE-2026-53595

FreeScout prior to v1.8.224 is vulnerable to anonymous account takeover via POST /user-setup/{hash}/{invite_sent_at}. The endpoint authenticates solely by invite_hash; an attacker can overwrite the target account’s email and password and log in without authentication. After activation, invite_has...

FUEL CMS Information Disclosure Vulnerability

FUEL CMS is a content management system CMS based on the Codelgniter framework. An information disclosure vulnerability exists in FUEL CMS version 11.4.12 and earlier, which allows an anonymous user to take full ownership of any account, including the administrator account...