CVE-2026-22888 MEDIUM

CVE-2026-22888

Vendor Cybozu, Inc.
Product Cybozu Garoon
Weakness CWE-231
Published February 2, 2026
Last update February 2, 2026
View on NVD All CVEs

CVSS base score

4.9/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of portal settings, potentially blocking access to the product.

Key dates

02Disclosure timeline

February 2, 2026 CVE published
February 2, 2026 Record updated