CVE-2026-22888_CVE-2026-22888

4.9 / 10

MEDIUM

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Description

Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of portal settings, potentially blocking access to the product.

Basic Information

ID CVE-2026-22888

Source jpcert

Published Feb 2, 2026 at 06:37

Affected Product

Vendor Cybozu, Inc.

Product Cybozu Garoon

Version 5.0.0 to 6.0.3

Affected Versions Cybozu, Inc. Cybozu Garoon 5.0.0 to 6.0.3

CWE Classification

CWE-231

References

{
    "lastseen": "",
    "description": "Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of portal settings, potentially blocking access to the product.",
    "published": "2026-02-02T06:37:33.802Z",
    "modified": "2026-02-02T06:37:33.802Z",
    "type": "cve",
    "title": "CVE-2026-22888",
    "source": "jpcert",
    "references": "https://kb.cybozu.support/article/39083/\nhttps://jvn.jp/en/jp/JVN35265756/",
    "id": "CVE-2026-22888",
    "bulletinFamily": "",
    "cwe": [
        "CWE-231"
    ],
    "cvelist": null,
    "sourceData": "Cybozu, Inc. Cybozu Garoon 5.0.0 to 6.0.3",
    "sourceHref": "",
    "cvss": {
        "score": 4.9,
        "severity": "MEDIUM",
        "vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
        "version": "3.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Cybozu Garoon",
    "version": "5.0.0 to 6.0.3",
    "vendor": "Cybozu, Inc.",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}