by Kastro
Paper/Archive/CVE-2026-100389

CVE-2026-100389

GestSup GestSup — GestSup before 3.2.62 Remote Code Execution via IMAP Attachment

EPSS 0.6%CVSS 9.2
critical.is priorityof 100
37
CVSS 9.2 (CNA)9.2 / 10 × 3027.6Not in CISA KEV+300.0EPSS percentile 47.6.476 × 209.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

GestSup versions before 3.2.62 contain a remote code execution vulnerability in the basic IMAP connector's attachment handling that fails to skip blocked file extensions. Unauthenticated attackers can send emails with PHP attachments to monitored mailboxes, which are written to the web-accessible upload/ticket directory and executed when accessed.

Affected

ProductAffectedFixed inSource
GestSup< 3.2.623.2.62CNA

Scores by source

VulnCheck (CNA)9.2CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
VulnCheck (CNA)8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refgestsup.fr/index.php?page=changelogrefgestsup.fr/index.php?page=downloadwriteupvulncheck.com/advisories/gestsup-before-3.2.61-remote-code-execution-via-imap-attachmentexploitblog.spiizn.xyz/articles/remote-code-execution-turning-a-ticket-into-a-new-issue