CVE-2026-40592

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.214, the undo-send route GET /conversation/undo-reply/threadid checks only whether the current user can view the parent conversation. It does not verify that the current user created the reply being undone. In a...

CVE-2026-40592 FreeScout's cross-user undo reply allows mailbox peers to recall another agent's outbound reply

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.214, the undo-send route GET /conversation/undo-reply/threadid checks only whether the current user can view the parent conversation. It does not verify that the current user created the reply being undone. In a...

CVE-2026-40592

FreeScout (self-hosted help desk) prior to 1.8.214 is affected by CVE-2026-40592. The vulnerability lies in the undo-send route GET /conversation/undo-reply/{thread_id}, which only checks whether the current user can view the parent conversation and does not verify that the user created the reply...

EUVD-2026-24189

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.214, the undo-send route GET /conversation/undo-reply/threadid checks only whether the current user can view the parent conversation. It does not verify that the current user created the reply being undone. In a...

CVE-2026-40592

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.214, the undo-send route GET /conversation/undo-reply/threadid checks only whether the current user can view the parent conversation. It does not verify that the current user created the reply being undone. In a...

EUVD-2010-3758

Malware in sbrugna...

CVE-2024-34697

FreeScout (Email Receival Module) is affected by a stored HTML Injection in versions prior to 1.8.139. Unauthenticated attackers can inject HTML into received emails, enabling risks such as form hijacking, application defacement, or data exfiltration via CSS injection. The issue is addressed by u...

SecureMail: Configuring Multiple Mailboxes

The requirement is to configure personal mailbox and a shared mailbox on Secure Mail for Android and iOS...

XenMobile 10.x : Addition of shared Mailbox in Secure Mail

Question: Does XenMobile 10.x support the addition of a shared Mailbox in Secure Mail For both iOS and Android ? Answer: Currently this is not supported on Secure Mail ActiveSync protocol officially doesn't support shared access/delegation. Hence, Secure Mail both iOS and Android also doesn’t cla...