CVE-2026-57279

MediumCVSS 6.8

Published: 10/08/2026(UTC)Updated: 10/08/2026(UTC)Translated: 10/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

24th percentile - higher than 24% of all known CVEs

Summary

Cybozu Garoon contains a cross-site scripting vulnerability. If exploited, an arbitrary script may be executed in the web browser of a logged-in user.

Risk Assessment

An attacker could execute malicious scripts in the context of a logged-in user's session, potentially leading to data theft or session hijacking.

Recommendation

Apply patches provided by Cybozu Garoon vendor to remediate the XSS vulnerability.

Original NVD description (English source)

Cybozu Garoon contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the web browser of a user logged in to the product.