PT-2026-5617 · Cybozu · Cybozu Garoon

Published 2026-02-02 · Updated 2026-02-02 · CVE-2026-22888

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 5.0.0 through 6.0.3

Description An improper input verification issue exists that may allow unauthorized alteration of portal settings. This could potentially block access to the product.

Recommendations Update Cybozu Garoon to a version later than 6.0.3.

Fix

Weakness Enumeration

CWE-231

Related Identifiers

CVE-2026-22888

Affected Products

Cybozu Garoon

References · 6

• https://osv.dev/vulnerability/CVE-2026-22888 · Vendor Advisory
• https://kb.cybozu.support/article/39083 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-22888 · Security Note
• https://twitter.com/CVEnew/status/2018227768853492140 · Twitter Post
• https://jvn.jp/en/jp/JVN35265756 · Note
• https://twitter.com/VulmonFeeds/status/2018230852904263884 · Twitter Post