CVE-2026-100389CWE-434unrestricted-file-upload

CVE-2026-100389

High · published September 26, 2026

CVSS v3.1
8.1
EPSS
1%
Percentile
47.0
In the wild
Unconfirmed
What it is

GestSup versions before 3.2.62 contain a remote code execution vulnerability in the basic IMAP connector's attachment handling that fails to skip blocked file extensions. Unauthenticated attackers can send emails with PHP attachments to monitored mailboxes, which are written to the web-accessible upload/ticket directory and executed when accessed.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
9.2 · CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00580 · 47.0th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2026-09-26T01:17Z
References (4)
https://blog.spiizn.xyz/articles/remote-code-execution-turning-a-ticket-into-a-new-issue/ · [email protected]https://gestsup.fr/index.php?page=changelog · [email protected]https://gestsup.fr/index.php?page=download · [email protected]https://www.vulncheck.com/advisories/gestsup-before-3.2.61-remote-code-execution-via-imap-attachment · [email protected]
EPSS history
Timeline
  • 27 SEP 03:24Z
    EPSS moved — → 1%
    epss
  • 25 SEP 20:13Z
    GestSup before 3.2.61 Remote Code Execution via IMAP Attachment
    cvelistv5