AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2026-22881

MEDIUM · CVSS 5.4 EPSS 0.22%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-02-02 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.4. See the original NVD description below for full technical details.

CVE
CVE-2026-22881
Severity
MEDIUM
CVSS
5.4
EPSS
0.22%

Original NVD Description

Cross-site scripting vulnerability exists in Message function of Cybozu Garoon 5.15.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-22888 HIGH CVE-2026-20711 MEDIUM CVE-2024-39817 MEDIUM CVE-2024-39457 MEDIUM CVE-2024-31402 MEDIUM CVE-2024-31399 MEDIUM