CVE-2026-85743

FreeScout, a self-hosted help desk, is vulnerable to Server-Side Request Forgery (SSRF) in versions prior to 1.8.230 . The root cause is an incomplete outbound host validation and unguarded download sinks within functions such as Helper::downloadRemoteFile(), Helper::checkPort(), Helper::sanitize...