PatchTheCVEcybozu vulnerabilities
Recent CVEs affecting cybozu products. 5 tracked.
cybozu has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-02-02. Highest priority: CVE-2026-22888 (score 41/100).
- CVE-2026-22888 HIGH 7.5 UPGRADE Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alter
- CVE-2026-22881 MEDIUM 5.4 UPGRADE Cross-site scripting vulnerability exists in Message function of Cybozu Garoon 5.15.0 to 6.0.3, which may allo
- CVE-2026-20711 MEDIUM 6.1 UPGRADE Cross-site scripting vulnerability exists in E-mail function of Cybozu Garoon 5.0.0 to 6.0.3, which may allow
- CVE-2024-39817 MEDIUM 6.5 UPGRADE Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may al
- CVE-2024-39457 MEDIUM 5.4 UPGRADE Cybozu Garoon 6.0.0 to 6.0.1 contains a cross-site scripting vulnerability in PDF preview
FAQ
How do I fix cybozu vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cybozu being exploited right now?
None of the tracked cybozu CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cybozu CVE should I patch first?
CVE-2026-22888 currently ranks highest (41/100): Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alter.