[ Vendor · 4 CVEs ]
GestSup
CVEs affecting GestSup published in the last 30 days, plus any GestSup CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-102372 | 29 Sep 2026 | CVSS 6.1 | GestSupGestSup versions before 3.2.61 fail to properly sanitize HTML email bodies in the IMAP LOGIN connector, allowing unauthenticated attackers to store… | |
| CVE-2026-102373 | 29 Sep 2026 | CVSS 6.5 | GestSupGestSup versions before 3.2.62 fail to validate ticket ownership when loading comments via the threadedit parameter in thread.php. Authenticated… | |
| CVE-2026-102374 | 29 Sep 2026 | CVSS 6.1 | GestSupGestSup versions before 3.2.62 contain a stored cross-site scripting vulnerability in the IMAP OAuth connector that double-decodes MIME-encoded email… | |
| CVE-2026-100389 | 25 Sep 2026 | CVSS 8.1 | GestSupGestSup versions before 3.2.62 contain a remote code execution vulnerability in the basic IMAP connector's attachment handling that fails to skip… |