CVE-2026-22888

6.9 mediumEPSS 0.4%

Medium (6.9) in cybozu garoon. EPSS 0.4% chance of exploitation in the next 30 days.

Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of portal settings, potentially blocking access to the product.

Severity

CVSS 4.0

6.9 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
CWE: CWE-231
Published: 2026-02-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cybozu:garoon

References

https://jvn.jp/en/jp/JVN35265756/
https://kb.cybozu.support/article/39083/

Check your stack JSON