PatchTheCVEgestsup vulnerabilities and fixes
Recent CVEs affecting gestsup, with upgrade or downgrade steps. 5 tracked.
gestsup has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-01-09. Highest priority: CVE-2026-22197 (score 35/100).
- CVE-2026-22198 MEDIUM 6.1 UPGRADE GestSup versions prior to 3.2.60 contain a pre-authentication stored cross-site scripting (XSS) vulnerability
- CVE-2026-22197 HIGH 8.1 UPGRADE GestSup versions prior to 3.2.60 contain multiple SQL injection vulnerabilities in the asset list functionalit
- CVE-2026-22196 HIGH 8.1 UPGRADE GestSup versions prior to 3.2.60 contain a SQL injection vulnerability in ticket creation functionality
- CVE-2026-22195 HIGH 8.1 UPGRADE GestSup versions prior to 3.2.60 contain a SQL injection vulnerability in the search bar functionality
- CVE-2026-22194 HIGH 8.8 UPGRADE GestSup versions up to and including 3.2.60 contain a cross-site request forgery (CSRF) vulnerability where th
FAQ
How do I fix gestsup vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gestsup being exploited right now?
None of the tracked gestsup CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gestsup CVE should I patch first?
CVE-2026-22197 currently ranks highest (35/100): GestSup versions prior to 3.2.60 contain multiple SQL injection vulnerabilities in the asset list functionalit.