CVE-2026-39384: Freescout

High severity, CVSS 7.6. EPSS: 0.3% chance of exploitation in the next 30 days.

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.212, FreeScout does not take the limit_user_customer_visibility parameter into account when merging customers. This vulnerability is fixed in 1.8.212.

Affected products

• Freescout Freescout: before 1.8.212 (fixed in 1.8.212)

Published 2026-04-07. Last modified 2026-06-17.