https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T14:55:43.558794+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-267033 EUVD-2026-267033 2026-10-07T14:55:43.608456+00:00 EUVD-2026-267033 https://cve.radiocsirt.org/vuln/fkie_cve-2026-20711 fkie_cve-2026-20711 2026-10-07T14:55:43.608495+00:00

Cross-site scripting vulnerability exists in E-mail function of Cybozu Garoon 5.0.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords.

 https://cve.radiocsirt.org/vuln/ghsa-wpfv-crpp-p2xq GHSA-wpfv-crpp-p2xq 2026-10-07T14:55:43.608531+00:00

Cross-site scripting vulnerability exists in E-mail function of Cybozu Garoon 5.0.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords.

 https://cve.radiocsirt.org/vuln/jvndb-2026-000012 jvndb-2026-000012 2026-10-07T14:55:43.608548+00:00

Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. <ul><li>[CyVDB-3687]Cross-site scripting vulnerability in E-mail (CWE-79) - CVE-2026-20711</li><li>[CyVDB-3689]Cross-site scripting vulnerability in Message (CWE-79) - CVE-2026-22881</li><li>[CyVDB-3995]Improper input verification in Portal setting (CWE-231) - CVE-2026-22888</li></ul>CVE-2026-20711 Masato Kinugawa reported this vulnerability to Cybozu, Inc. and Cybozu, Inc. reported it to JPCERT/CC to notify users of its solution through JVN. CVE-2026-22881, CVE-2026-22888 Cybozu, Inc. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.