Securityweek
Critical FreeScout Vulnerability Enables Zero-Click RCE Attacks
First seen 4 Mar 2026, 10:08 UTC
•
+3
•47.3
Export
Article Content
Browse articles
A critical vulnerability in FreeScout has been identified, allowing for zero-click remote code execution (RCE) attacks. This flaw escalates a previously disclosed authenticated code execution bug, enabling unauthenticated attacks that can compromise servers without user interaction. Affected systems are at risk of full server compromise due to this security issue.
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Timeline
2026-03-04
Critical FreeScout vulnerability reported by OX Security
2026-03-04
Patch bypass for vulnerability identified
Date unknown
Authenticated code execution bug disclosed
More articles in this cluster
Continue Reading
Google Addresses Unreported Chrome Zero-Day Vulnerability
Google Addresses Eighth Chrome Zero-Day Vulnerability in 2025
Apple Fixes Zero-Day Vulnerability in Software Update
Cisco Fixes Critical AsyncOS Vulnerability Under Attack
CISA Directs Agencies to Address Gogs RCE Vulnerability Exploited in Zero-Day Attacks
Cisco Addresses AsyncOS Zero-Day Exploited by Threat Actors