CVE-2026-22888
HIGHCybozu Garoon <6.0.3 - Info Disclosure
Title source: llmDescription
Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of portal settings, potentially blocking access to the product.
Scores
CVSS v3
7.5
EPSS
0.0002
EPSS Percentile
4.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Classification
CWE
CWE-231
Status
published
Affected Products (1)
cybozu/garoon
< 6.0.3
Timeline
Published
Feb 02, 2026
Tracked Since
Feb 18, 2026