#5
BleepingComputer
general
March 04, 2026 at 21:51 UTC
Mail2Shell zero-click attack lets hackers hijack FreeScout mail servers
By Bill Toulas
AI Summary
FreeScout helpdesk platform contains a maximum severity zero-click vulnerability dubbed Mail2Shell that allows remote code execution without authentication or user interaction. The flaw represents a patch bypass for an authenticated code execution bug, enabling attackers to achieve full server compromise through email-based exploitation of the open-source support ticket system.
Relevance score: 88.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →