Skip to content
GGestSup
Products
| Product | CVEs | Exploited | Latest |
| GestSup | 9 | – | Sep 29, 2026 |
Exploited and recent CVEs
-
CVE-2026-102374
Medium 6.1
GestSup before 3.2.62 Stored XSS via Double-Decoded Email Subject in OAuth IMAP Connector
0.2%
-
CVE-2026-102373
Medium 6.5
GestSup before 3.2.62 Private Ticket Comment Disclosure via threadedit Parameter
0.2%
-
CVE-2026-102372
Medium 6.1
GestSup before 3.2.61 Stored XSS via Email Body in LOGIN IMAP Connector
0.2%
-
CVE-2026-100389
High 8.1
GestSup before 3.2.62 Remote Code Execution via IMAP Attachment
0.6%
-
CVE-2026-22196
High 7.7
GestSup < 3.2.60 SQL Injection in Ticket Creation
0.3%
-
CVE-2026-22198
Medium 5.1
GestSup < 3.2.60 Stored XSS in API Error Logs
0.3%
-
CVE-2026-22197
High 7.5
GestSup < 3.2.60 Multiple SQL Injections in Asset List
0.3%
-
CVE-2026-22195
High 7.7
GestSup < 3.2.60 SQL Injection in Search Bar
0.3%
-
CVE-2026-22194
High 8.9
GestSup <= 3.2.60 CSRF Allows Privileged Actions
0.2%