CVE-2026-102374

Versions of GestSup prior to 3.2.62 are vulnerable to a stored cross-site scripting (XSS) vulnerability within the IMAP OAuth connector . The root cause is the double-decoding of MIME-encoded email subjects after HTML escaping has already occurred. This allows unauthenticated attackers to send cr...

CVE-2026-102372 GestSup before 3.2.62 Stored XSS via Email Body in LOGIN IMAP Connector

GestSup versions before 3.2.62 fail to properly sanitize HTML email bodies in the IMAP LOGIN connector, allowing unauthenticated attackers to store arbitrary JavaScript in ticket descriptions and replies. Attackers can send emails to the monitored mailbox containing script tags and event handlers...

CVE-2026-102372 GestSup before 3.2.61 Stored XSS via Email Body in LOGIN IMAP Connector

GestSup versions before 3.2.61 fail to properly sanitize HTML email bodies in the IMAP LOGIN connector, allowing unauthenticated attackers to store arbitrary JavaScript in ticket descriptions and replies. Attackers can send emails to the monitored mailbox containing script tags and event handlers...

CVE-2026-100389

GestSup versions before 3.2.62 contain a remote code execution vulnerability in the basic IMAP connector's attachment handling that fails to skip blocked file extensions. Unauthenticated attackers can send emails with PHP attachments to monitored mailboxes, which are written to the web-accessible...

CVE-2026-100389 GestSup before 3.2.62 Remote Code Execution via IMAP Attachment

GestSup versions before 3.2.62 contain a remote code execution vulnerability in the basic IMAP connector's attachment handling that fails to skip blocked file extensions. Unauthenticated attackers can send emails with PHP attachments to monitored mailboxes, which are written to the web-accessible...

CVE-2026-100389

GestSup versions prior to 3.2.61 are vulnerable to remote code execution (RCE) due to a flaw in the basic IMAP connector's attachment handling. The system fails to skip blocked file extensions, allowing unauthenticated attackers to send emails containing PHP attachments to monitored mailboxes. Th...

EUVD-2026-87326

GestSup versions before 3.2.61 contain a remote code execution vulnerability in the basic IMAP connector's attachment handling that fails to skip blocked file extensions. Unauthenticated attackers can send emails with PHP attachments to monitored mailboxes, which are written to the web-accessible...

CVE-2026-100389 GestSup before 3.2.62 Remote Code Execution via IMAP Attachment

GestSup versions before 3.2.62 contain a remote code execution vulnerability in the basic IMAP connector's attachment handling that fails to skip blocked file extensions. Unauthenticated attackers can send emails with PHP attachments to monitored mailboxes, which are written to the web-accessible...

PT-2026-99109

Name of the Vulnerable Software and Affected Versions GestSup versions prior to 3.2.61 Description An issue exists in the basic IMAP connector's attachment handling that fails to skip blocked file extensions. Unauthenticated attackers can send emails containing PHP attachments to monitored...

CVE-2026-100389: Unrestricted Upload of File with Dangerous Type

GestSup versions before 3.2.62 contain a remote code execution vulnerability in the basic IMAP connector's attachment handling that fails to skip blocked file extensions. Unauthenticated attackers can send emails with PHP attachments to monitored mailboxes, which are written to the web-accessible...

CVE-2024-48890

An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability CWE-78 in FortiSOAR IMAP connector version 3.5.7 and below may allow an authenticated attacker to execute unauthorized code or commands via a specifically crafted playbook...

CVE-2024-48890

An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability CWE-78 in FortiSOAR IMAP connector version 3.5.7 and below may allow an authenticated attacker to execute unauthorized code or commands via a specifically crafted playbook...

CVE-2024-48890

An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability CWE-78 in FortiSOAR IMAP connector version 3.5.7 and below may allow an authenticated attacker to execute unauthorized code or commands via a specifically crafted playbook...

CVE-2024-48890

FortiSOAR IMAP connector (versions ≤ 3.5.7) is affected by an OS Command Injection (CWE-78) due to improper neutralization of special elements in commands. An authenticated attacker could execute unauthorized code or commands via a specially crafted playbook. Remediation: upgrade FortiSOAR IMAP c...

CVE-2024-48890: Improper Neutralization of Special Elements used in an OS Command

An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability CWE-78 in FortiSOAR IMAP connector version 3.5.7 and below may allow an authenticated attacker to execute unauthorized code or commands via a specifically crafted playbook...

PT-2025-2818 · Fortinet · Fortisoar Imap Connector

Name of the Vulnerable Software and Affected Versions: FortiSOAR IMAP connector versions 3.5.7 and below Description: The issue is related to an improper neutralization of special elements used in an OS command, which may allow an authenticated attacker to execute unauthorized code or commands vi...