Improper Input Validation in Cybozu Garoon Allows Portal Tampering

Publication date: 2026-02-02

Last updated on: 2026-02-19

Assigner: JPCERT/CC

Description

Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of portal settings, potentially blocking access to the product.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-02-02

Last Modified

2026-02-19

Generated

2026-07-06

AI Q&A

2026-02-02

EPSS Evaluated

2026-07-05

NVD

CVE-2026-22888

EUVD

EUVD-2026-5121

Affected Vendors & Products

Vendor	Product	Version / Range
cybozu	garoon	From 5.0.0 (inc) to 6.0.3 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-231	The product does not handle or incorrectly handles when more values are provided than expected.

Attack-Flow Graph

Executive Summary

This vulnerability is an improper input verification issue in Cybozu Garoon versions 5.0.0 to 6.0.3. It may allow an attacker to alter portal settings without authorization, which could potentially block access to the product.

Impact Analysis

The vulnerability can impact you by allowing unauthorized changes to portal settings, which may result in loss of access to the Cybozu Garoon product, disrupting normal operations.

Hi! I’m here to help you understand CVE-2026-22888. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70