CVE-2026-62856 | freescout-help-desk FreeScout up to 1.8.225 Notification Payload Generation channel_name sql injection

November 6, 2026 Yanac

A vulnerability, which was classified as critical, was found in freescout-help-desk FreeScout up to 1.8.225. This vulnerability affects unknown code of the component Notification Payload Generation. Executing a manipulation of the argument channel_name can lead to sql injection.

This vulnerability appears as CVE-2026-62856. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More