GestSup

Products

ProductCVEsExploitedLatest
GestSup9–Sep 29, 2026

Exploited and recent CVEs

  • CVE-2026-102374 Medium 6.1 GestSup before 3.2.62 Stored XSS via Double-Decoded Email Subject in OAuth IMAP Connector 0.2%
  • CVE-2026-102373 Medium 6.5 GestSup before 3.2.62 Private Ticket Comment Disclosure via threadedit Parameter 0.2%
  • CVE-2026-102372 Medium 6.1 GestSup before 3.2.61 Stored XSS via Email Body in LOGIN IMAP Connector 0.2%
  • CVE-2026-100389 High 8.1 GestSup before 3.2.62 Remote Code Execution via IMAP Attachment 0.6%
  • CVE-2026-22196 High 7.7 GestSup < 3.2.60 SQL Injection in Ticket Creation 0.3%
  • CVE-2026-22198 Medium 5.1 GestSup < 3.2.60 Stored XSS in API Error Logs 0.3%
  • CVE-2026-22197 High 7.5 GestSup < 3.2.60 Multiple SQL Injections in Asset List 0.3%
  • CVE-2026-22195 High 7.7 GestSup < 3.2.60 SQL Injection in Search Bar 0.3%
  • CVE-2026-22194 High 8.9 GestSup <= 3.2.60 CSRF Allows Privileged Actions 0.2%