CVE-2026-40590

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.214, the Change Customer modal exposes a “Create a new customer” flow via POST /customers/ajax with action=create. Under limited visibility, the endpoint drops unique-email validation. If the supplied email already...

Account Duplication Via Email Reuse

froxlor/froxlor is vulnerable to Account duplication via email reuse. The vulnerability is due to improper validation of email uniqueness, allowing authenticated users to create multiple accounts with the same email address as existing accounts, potentially leading to security issues...