CVE-2026-40496

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, attachment download tokens are generated using a weak and predictable formula: "md5APPKEY + attachmentid + size". Since attachmentid is sequential and size can be brute-forced in a small range, an...