https://vulnerability.circl.lu/sightings/feed 2026-09-28T16:01:14.211855+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/a45c5a5a-b15a-4b84-9398-33bf9594e2db/export 2026-09-28T16:01:14.241218+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a45c5a5a-b15a-4b84-9398-33bf9594e2db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100389", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwgmmucudh2q", "content": "CVE-2026-100389 - gestsup\nVersions of GestSup older than 3.2.61 let anyone send a specially crafted email with a PHP file attached. The system saves that file in a publicly reachable folder and runs it, giving the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gestsup #CVE #infosec", "creation_timestamp": "2026-09-26T15:40:06.371345Z"} 2026-09-26T15:40:06.371345+00:00 https://vulnerability.circl.lu/sighting/0243b457-5d8b-4704-a6cc-b84f3033ccb9/export 2026-09-28T16:01:14.244099+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0243b457-5d8b-4704-a6cc-b84f3033ccb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100389", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117336874943730236", "content": "GestSup <3.2.61 is vulnerable to CRITICAL RCE (CVE-2026-100389) via IMAP connector. Attackers can send PHP attachments to monitored mailboxes, leading to system compromise. Upgrade to 3.2.61+ ASAP. https://radar.offseq.com/threat/gestsup-versions-before-3261-contain-a-remote-code-execution-vulnerability-in-the-basic-imap-125b3f214ef54f5e #OffSeq #Infosec #RCE #GestSup", "creation_timestamp": "2026-09-26T10:30:24.770889Z"} 2026-09-26T10:30:24.770889+00:00 https://vulnerability.circl.lu/sighting/dde59198-f0f2-419a-8ca0-0619759168e7/export 2026-09-28T16:01:14.244212+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "dde59198-f0f2-419a-8ca0-0619759168e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100389", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mweyaa25sv2g", "content": "\ud83d\udfe0 CVE-2026-100389 - High (8.1)\n\nGestSup versions before 3.2.61 contain a remote code execution vulnerability in the basic IMAP co...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100389/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-26T00:02:29.137268Z"} 2026-09-26T00:02:29.137268+00:00 https://vulnerability.circl.lu/sighting/23c65c3e-aa72-4e78-bd7e-8ee85e423524/export 2026-09-28T16:01:14.244291+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "23c65c3e-aa72-4e78-bd7e-8ee85e423524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100389", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4y4725iyrjslk", "content": "CVE-2026-100389 - GestSup before 3.2.61 Remote Code Execution via IMAP Attachment\nCVE ID : CVE-2026-100389\n \n Published : Sept. 25, 2026, 9:17 p.m. | 30\u00a0minutes ago\n \n Description : GestSup versions before 3.2.61 contain a remote code execution vulnerability in the basic IMAP ...", "creation_timestamp": "2026-09-25T22:25:02.390072Z"} 2026-09-25T22:25:02.390072+00:00 https://vulnerability.circl.lu/sighting/c812c416-c34c-4cd2-93d8-ab8f3fdb3bd2/export 2026-09-28T16:01:14.244375+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c812c416-c34c-4cd2-93d8-ab8f3fdb3bd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100389", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwersu2dai2q", "content": "\ud83d\udea8 CVE-2026-100389 \u2014 CVSS 9.2 CRITICAL\n\nGestSup versions before 3.2.61 contain a remote code execution vulnerability in the basic IMAP connector's ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100389\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-25T22:07:36.643172Z"} 2026-09-25T22:07:36.643172+00:00