CVE-2026-27637

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.206, FreeScout's "TokenAuth" middleware uses a predictable authentication token computed as "MD5userid + createdat + APPKEY". This token is static never expires/rotates, and if an attacker...