XSS in Cybozu, Inc Cybozu Garoon

CVE-2026-57279

Cybozu Garoon contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the web browser of a user logged in to the product.

Vulnerability class: XSS (Cross-Site Scripting)

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2026-57279?
CVE-2026-57279 is a medium-severity vulnerability in Cybozu, Inc Cybozu Garoon, classified under Cross-site Scripting. CVSS score: 6.8/10. Published 2026-08-10.
How severe is CVE-2026-57279?
Medium severity. CVSS v3 base score is 6.8 out of 10.