General-Purpose System Vulnerabilities
Vulnerabilities related to traditional IT systems, servers, and desktop applications.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2026-22198 | GestSup versions prior to 3.2.60 contain a pre-authentication stored cross-site scripting (XSS) vulnerability in the AP… | Medium (6.1) | 2026-01-09 | General-Purpose |
| CVE-2026-22197 | GestSup versions prior to 3.2.60 contain multiple SQL injection vulnerabilities in the asset list functionality. Multip… | High (8.1) | 2026-01-09 | General-Purpose |
| CVE-2026-22196 | GestSup versions prior to 3.2.60 contain a SQL injection vulnerability in ticket creation functionality. User-controlle… | High (8.1) | 2026-01-09 | General-Purpose |
| CVE-2026-22195 | GestSup versions prior to 3.2.60 contain a SQL injection vulnerability in the search bar functionality. User-controlled… | High (8.1) | 2026-01-09 | General-Purpose |
| CVE-2026-22194 | GestSup versions up to and including 3.2.60 contain a cross-site request forgery (CSRF) vulnerability where the applica… | High (8.8) | 2026-01-09 | General-Purpose |