A vulnerability marked as critical has been reported in freescout-help-desk freescout up to 1.8.205. Affected is an unknown function of the file app/Misc/Helper.php. The manipulation leads to unrestricted upload.
This vulnerability is uniquely identified as CVE-2026-27636. The attack is possible to be carried out remotely. No exploit exists.
It is suggested to upgrade the affected component.