CVE Vulnerabilities

CVE-2026-22888

Improper Handling of Extra Values

Published: Feb 02, 2026 | Modified: Feb 19, 2026
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of portal settings, potentially blocking access to the product.

Weakness

The product does not handle or incorrectly handles when more values are provided than expected.

Affected Software

NameVendorStart VersionEnd Version
GaroonCybozu5.0.0 (including)6.0.3 (excluding)

References