CVE-2026-62856

The FreeScout help desk and shared mailbox application is vulnerable to cross-user notification data disclosure in versions prior to 1.8.226 . The polycast/receive endpoint fails to escape SQL LIKE wildcards in supplied channel names, combined with incomplete authorization that only checks specif...