ETK-2026-3170Zero's internal tracking ID, independent of the CVE number.

{
  "etk_id": "ETK-2026-3170",
  "cve_id": null,
  "display_id": "ETK-2026-3170",
  "ghsa_id": "GHSA-c359-7mcr-j3xx",
  "euvd_id": null,
  "status": "published",
  "anchor_state": "awaiting_cve",
  "title": "Password-reset token reuse after email reassignment in FreeScout",
  "summary": "FreeScout 1.8.248, and potentially earlier releases, can retain password-reset tokens when an email address is changed, released, or assigned to another account. An attacker holding an unexpired token can reset the password of the account that later receives that address, including an administrator account; email reassignment during the token lifetime is required.",
  "mitigation": "Upgrade FreeScout to version 1.8.249. Until the upgrade is complete, invalidate outstanding password-reset tokens before changing, releasing, deleting, or reassigning email addresses.",
  "vendor": null,
  "product": "FreeScout",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "<1.8.249"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "1.8.249"
      ],
      "package_name": null,
      "purl": null
    }
  ],
  "cwes": [
    640
  ],
  "cvss_score": 8.8,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 31.681965466666668,
  "t0_at": null,
  "signals": {
    "trigger_signal": {
      "at": "2026-10-31T10:26:26+00:00",
      "days": -0.2294954013773148,
      "is_lower_bound": true,
      "measured_at": "2026-10-31T15:56:54.435369+00:00",
      "url": "https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-c359-7mcr-j3xx"
    }
  }
}