Topic: file upload restriction

Critical FreeScout Flaw: Zero-Click RCE via Email (CVE-2026-28289)

A critical vulnerability (CVE-2026-28289) in FreeScout help desk software allows remote attackers to execute code and take over servers by sending a malicious email, bypassing a previous patch. The flaw exploits a filename validation bypass using a Zero-Width Space character, enabling attackers t...