CVE-2026-28289

The repository contains a functional Python script that exploits CVE-2026-28289, a zero-click RCE vulnerability in FreeScout. The exploit sends a crafted email with malicious attachments (a Unicode-prefixed .htaccess and a PHP webshell) to bypass filename sanitization and achieve remote code execution.

This repository contains functional exploit code for CVE-2026-28289, a TOCTOU vulnerability in FreeScout ≤1.8.206 that allows authenticated RCE via .htaccess upload bypass using Unicode manipulation. The PoC includes multiple attack vectors and a Docker-based lab environment for testing.

The repository contains a functional Python script that exploits CVE-2026-28289, a zero-click RCE vulnerability in FreeScout. The exploit sends a malicious email with a Unicode-prefixed .htaccess file and a PHP webshell, bypassing filename sanitization to achieve remote code execution.

The repository contains a functional Python script that exploits CVE-2026-28289, a zero-click RCE vulnerability in FreeScout. The exploit sends a malicious email with a Unicode-prefixed .htaccess file and a PHP webshell, bypassing filename sanitization to achieve remote code execution.

This Metasploit module exploits CVE-2026-28289 in FreeScout <= 1.8.206 by sending a crafted email with a ZWSP-prefixed .htaccess attachment, which bypasses filename sanitization and achieves RCE via PHP code execution.