CVE ID :CVE-2026-100389
Published : Sept. 25, 2026, 8:13 p.m. | 1 hour, 16 minutes ago
Description :GestSup versions before 3.2.61 contain a remote code execution vulnerability in the basic IMAP connector’s attachment handling that fails to skip blocked file extensions. Unauthenticated attackers can send emails with PHP attachments to monitored mailboxes, which are written to the web-accessible upload/ticket directory and executed when accessed.
Severity: 8.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more… To Read More Visit Read More