Japan Vulnerability Signals

Topic Collection / Japan Vulnerability Records

Japan Vulnerability Signals

Official JVN iPedia records, guarded JPCERT/CC alert records, guarded IPA icat security-alert records, and NISC/NCO national-warning notices, normalized into an English-first monitoring layer for Japanese supplier, product, CVE, CERT advisory, and national cyber-warning review. Records enter the database before any article decision.

Open tracker preset Sample CSV Request commercial feed access
578Japan records
Live listCVE tags
Live listVendor hints
Live APINewest source date
Live APIOldest rendered date

Server-Rendered Database Proof

Japan records are counted before browser hydration.

This collection renders database totals, source-family counts, freshness, and export links from the public summary first. The browser then loads a capped record list for interactive search.

Japan records578Active public rows in this collection
Active sources4/4Configured source families with records
Added / seen in 24h0Latest 2026-11-08 00:17
JVN iPedia406JPCERT/CC alerts148IPA icat12NISC/NCO warnings12

Summary generated 2026-11-14 04:04. If the record list is still loading, these server-side counts remain the collection baseline.

Source Status

Core Japan vulnerability, CERT, and NISC layer

Japan JVN latest polling/backfill, scheduled JPCERT/CC alert polling/backfill, guarded scheduled IPA icat latest polling, and guarded NISC/NCO public-warning records are active. Monthly vendor patch-cycle and broad policy/reference rows remain review-only.

The database has active monitoring records for this collection. A quiet period means the source did not publish matching records, not that the page is broken.

StatusActive source layer
Records in layer578
Source families4/4
All public layers 24h0
Latest database activity2026-11-08 00:17
Status generated2026-11-14 04:04

What this collection covers

JVN iPedia records identify affected products, CVEs, weakness types, vendors, reporting organizations, and remediation context. JPCERT/CC alerts, IPA icat security-alert rows, and NISC/NCO public warnings add official Japan CERT/government prioritization for selected security alerts, campaign warnings, ransomware/DDoS guidance, and national cyber-warning context. Nogosee stores them as monitoring records so teams can search Japan exposure without turning every source note into a thin article.

Collection status

The latest JVN feed is active, official yearly JVN backfill is running in small newest-to-oldest segments, JPCERT/CC alert coverage is scheduled, IPA icat latest polling is guarded by D1 overlap checks, and NISC/NCO warning-list rows are guarded/manual with explicit allowlists. Japan remains focused on vulnerability, CERT, and national-warning depth before broader Japan procurement expansion.

Next Analyst Paths

Continue the workflow

Move from one collection into nearby country, topic, freshness, or commercial-access views without returning to the homepage.

Taiwan public signalsPublic-company cyber disclosures, cybersecurity procurement records, TWCERT/CC TVN vulnerability notes, and guarded TWCERT/CC security-news warnings.Taiwan MOPS incident disclosuresListed-company cyber incident, recovery, ransomware, and operational disruption workflow.Taiwan cyber procurement watchGovernment cybersecurity tenders and awards for resilience, SOC, identity, and infrastructure signals.Korea KrCERT security signalsKISA/KrCERT notices translated and normalized for English-language monitoring.Thailand NCSA pilot signalsLatest-feed pilot records from Thailand NCSA Webboard security advisories.

Enterprise Handoff

Turn this public slice into a monitored workflow

Start with capped public records for Japan Vulnerability Signals, then request the minimum private access needed for repeat review, team routing, or historical analysis.

Evaluate The Slice

Open the tracker preset and capped CSV first, then request a bounded evaluation export only if the public view fits your review queue.

Open tracker presetDownload capped CSVRequest evaluation export

Automate Monitoring

Use the public RSS feed for lightweight follow-up, or request recurring feed/API access for SIEM, vendor-risk, and internal dashboard workflows.

Open RSS feedRequest recurring feedRequest API integration

Scope Team Access

Ask for historical export or custom monitoring when a team needs country, sector, source-family, entity, or threat-theme coverage beyond public caps.

Request historical exportRequest team monitoring setup

Public pages prove workflow fit without exposing private source baskets, full historical archives, scoring weights, matching logic, prompts, or anti-abuse controls.

Use this as a supplier exposure workflow

Search by CVE, product, vendor, weakness, CERT advisory, or sector. Open the official source for verification, then use the tracker preset or capped CSV sample for weekly review. Full data-feed access stays request-only.

578 rendered records. Public exports are capped; commercial feeds are available by request.

Highest-priority Japan signals

Score 70 / Governance

"Handmade Marketplace App - Creema" vulnerable to open redirect

"Handmade Marketplace App - Creema" provided by CREEMA LTD. contains the following vulnerability. Open redirect (CWE-601) - CVE-2026-72528 Koki Sato of BroadBand Security, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

Published 2026-10-15 / Japan JVN iPedia / JVN iPedia / vulnerability-intelligence
Score 70 / Governance

Multiple vulnerabilities in GROWI

GROWI provided by GROWI, Inc. contains multiple vulnerabilities listed below: Authorization bypass through user-controlled key in the bookmark folder APIs (CWE-639) - CVE-2026-53620 Incorrect authorization in the bookmark listing APIs (CWE-863) - CVE-2026-68951 CVE-2026-53620 Masashi Kawamoto reported this vulnerability to JPCERT/CC, and Fumito Otake of The Japan Research Institute, Limited. reported the same vuln...

Published 2026-08-28 / Japan JVN iPedia / JVN iPedia / vulnerability-intelligence
Score 70 / Governance

Zabbix agent may insecurely load Dynamic Link Libraries

Zabbix agent provided by Zabbix LLC may load Dynamic Link Libraries insecurely due to the following vulnerability. Incorrect default permissions (CWE-276) - CVE-2026-59781 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

Published 2026-08-28 / Japan JVN iPedia / JVN iPedia / vulnerability-intelligence
Score 70 / Governance

Multiple vulnerabilities in SOY series

SOY series provided by Tsuyoshi Saito contain multiple vulnerabilities listed below. Cross-site Scripting (CWE-79) - CVE-2026-73827, CVE-2026-77838, CVE-2026-78238 Deserialization of Untrusted Data (CWE-502) - CVE-2026-78032 Shogo Kumamaru of LAC Co., Ltd. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

Published 2026-08-28 / Japan JVN iPedia / JVN iPedia / vulnerability-intelligence
Score 70 / Governance

Installer for Rakuten Kobo Desktop Application (Windows version) may insecurely load Dynamic Link Libraries

The installer for Rakuten Kobo Desktop Application (Windows version) contains the following vulnerability in the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Uncontrolled search path element (CWE-427) - CVE-2026-68955 Yukihiro Nakamura reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

Published 2026-08-27 / Japan JVN iPedia / JVN iPedia / enterprise-software
Score 70 / Governance

FURUNO ELECTRIC FA-50 CLASS B AIS TRANSPONDER uses hard-coded credentials and misses authentication for additional configuration

FA-50 CLASS B AIS TRANSPONDER provided by FURUNO ELECTRIC CO., LTD. contains the following vulnerabilities. Use of hard-coded credentials (CWE-798) - CVE-2026-59769 The CVSS evaluation above assumes that an attacker who knows the credentials and has access to the network to which the device is connected to operates, using that credentials, the settings screen and alter the identification number etc. Missing authen...

Published 2026-08-26 / Japan JVN iPedia / JVN iPedia / network-and-edge-devices

Searchable Japan records

70score

2026-10-15 / Governance / Japan JVN iPedia

"Handmade Marketplace App - Creema" vulnerable to open redirect

"Handmade Marketplace App - Creema" provided by CREEMA LTD. contains the following vulnerability. Open redirect (CWE-601) - CVE-2026-72528 Koki Sato of BroadBand Security, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

Entity
JVN iPedia
Sector
vulnerability-intelligence
Scoring reasons
public-vulnerability-record, japan-jvn-ipedia
japanjvnjvn-ipediavulnerabilityCVE-2026-72528vulnerability-intelligenceHandmadeMarketplace
70score

2026-08-28 / Governance / Japan JVN iPedia

Multiple vulnerabilities in GROWI

GROWI provided by GROWI, Inc. contains multiple vulnerabilities listed below: Authorization bypass through user-controlled key in the bookmark folder APIs (CWE-639) - CVE-2026-53620 Incorrect authorization in the bookmark listing APIs (CWE-863) - CVE-2026-68951 CVE-2026-53620 Masashi Kawamoto reported this vulnerability to JPCERT/CC, and Fumito Otake of The Japan Research Institute, Limited. reported the same vuln...

Entity
JVN iPedia
Sector
vulnerability-intelligence
Scoring reasons
public-vulnerability-record, japan-jvn-ipedia
japanjvnjvn-ipediavulnerabilityCVE-2026-53620CVE-2026-68951vulnerability-intelligenceMultiple
70score

2026-08-28 / Governance / Japan JVN iPedia

Zabbix agent may insecurely load Dynamic Link Libraries

Zabbix agent provided by Zabbix LLC may load Dynamic Link Libraries insecurely due to the following vulnerability. Incorrect default permissions (CWE-276) - CVE-2026-59781 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

Entity
JVN iPedia
Sector
vulnerability-intelligence
Scoring reasons
public-vulnerability-record, japan-jvn-ipedia
japanjvnjvn-ipediavulnerabilityCVE-2026-59781vulnerability-intelligenceZabbixDynamic
70score

2026-08-28 / Governance / Japan JVN iPedia

Multiple vulnerabilities in SOY series

SOY series provided by Tsuyoshi Saito contain multiple vulnerabilities listed below. Cross-site Scripting (CWE-79) - CVE-2026-73827, CVE-2026-77838, CVE-2026-78238 Deserialization of Untrusted Data (CWE-502) - CVE-2026-78032 Shogo Kumamaru of LAC Co., Ltd. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

Entity
JVN iPedia
Sector
vulnerability-intelligence
Scoring reasons
public-vulnerability-record, japan-jvn-ipedia
japanjvnjvn-ipediavulnerabilityCVE-2026-73827CVE-2026-77838CVE-2026-78238CVE-2026-78032
70score

2026-08-27 / Governance / Japan JVN iPedia

Installer for Rakuten Kobo Desktop Application (Windows version) may insecurely load Dynamic Link Libraries

The installer for Rakuten Kobo Desktop Application (Windows version) contains the following vulnerability in the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Uncontrolled search path element (CWE-427) - CVE-2026-68955 Yukihiro Nakamura reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

Entity
JVN iPedia
Sector
enterprise-software
Scoring reasons
public-vulnerability-record, japan-jvn-ipedia
japanjvnjvn-ipediavulnerabilityCVE-2026-68955enterprise-softwareInstallerRakuten
70score

2026-08-26 / Governance / Japan JVN iPedia

FURUNO ELECTRIC FA-50 CLASS B AIS TRANSPONDER uses hard-coded credentials and misses authentication for additional configuration

FA-50 CLASS B AIS TRANSPONDER provided by FURUNO ELECTRIC CO., LTD. contains the following vulnerabilities. Use of hard-coded credentials (CWE-798) - CVE-2026-59769 The CVSS evaluation above assumes that an attacker who knows the credentials and has access to the network to which the device is connected to operates, using that credentials, the settings screen and alter the identification number etc. Missing authen...

Entity
JVN iPedia
Sector
network-and-edge-devices
Scoring reasons
public-vulnerability-record, japan-jvn-ipedia
japanjvnjvn-ipediavulnerabilityCVE-2026-59769CVE-2026-67578network-and-edge-devicesFURUNO
70score

2026-08-26 / Governance / Japan JVN iPedia

Multiple vulnerabilities in CorvusSKK

CorvusSKK provided by SASAKI Nobuyuki contains multiple vulnerabilities listed below: Code Injection (CWE-94) - CVE-2026-76148 Integer Overflow or Wraparound (CWE-190) - CVE-2026-76149 Ryo Shimada of Powder Keg Technologies, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

Entity
JVN iPedia
Sector
vulnerability-intelligence
Scoring reasons
public-vulnerability-record, japan-jvn-ipedia
japanjvnjvn-ipediavulnerabilityCVE-2026-76148CVE-2026-76149vulnerability-intelligenceMultiple
70score

2026-08-26 / Governance / Japan JVN iPedia

Android App "Myna Point" vulnerable to improper access restriction

Android App "Myna Point" provided by Digital Agency contains the following vulnerability. Improper Authorization in Handler for Custom URL Scheme (CWE-939) - CVE-2026-73335 RyotaK of GMO Flatt Security Inc. reported this vulnerability to the developer and IPA. JPCERT/CC coordinated with the developer to publish the advisory under Information Security Early Warning Partnership.

Entity
JVN iPedia
Sector
mobile-software
Scoring reasons
public-vulnerability-record, japan-jvn-ipedia
japanjvnjvn-ipediavulnerabilityCVE-2026-73335mobile-softwareAndroidApp
70score

2026-08-25 / Governance / Japan JVN iPedia

Apache Struts 2 vulnerable to resource exhaustion

Apache Struts 2 provided by The Apache Software Foundation contains the following vulnerability: Allocation of resources without limits or throttling (CWE-770) - CVE-2026-73635 KuniyoshiNoguchi reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

Entity
JVN iPedia
Sector
enterprise-software
Scoring reasons
public-vulnerability-record, japan-jvn-ipedia
japanjvnjvn-ipediavulnerabilityCVE-2026-73635enterprise-softwareApacheStruts
70score

2026-08-24 / Governance / Japan JVN iPedia

Security information for Hitachi Disk Array Systems

CVE-2026-33828 | Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability CVE-2026-34335 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability CVE-2026-40404 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability CVE-2026-40409 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability CVE...

Entity
JVN iPedia
Sector
enterprise-software
Scoring reasons
public-vulnerability-record, japan-jvn-ipedia
japanjvnjvn-ipediavulnerabilityCVE-2026-33828CVE-2026-34335CVE-2026-40404CVE-2026-40409
70score

2026-08-13 / Governance / Japan JVN iPedia

VoiceTra vulnerable to incorrectly specified destination in a communication channel

VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains the following vulnerability. Incorrectly specified destination in a communication channel (CWE-941) - CVE-2026-72506 RyotaK of GMO Flatt Security Inc. reported this vulnerability to NICT and coordinated. After the coordination was completed, RyotaK reported the case to JPCERT/CC to notify users of the solution thro...

Entity
JVN iPedia
Sector
vulnerability-intelligence
Scoring reasons
public-vulnerability-record, japan-jvn-ipedia
japanjvnjvn-ipediavulnerabilityCVE-2026-72506vulnerability-intelligenceVoiceTraNational
70score

2026-08-10 / Governance / Japan JVN iPedia

Installer for LINE for Windows insecurely loads Dynamic Link Libraries

The installer for LINE for Windows provided by LY Corporation contains the following vulnerability: Uncontrolled search path element (CWE-427) - CVE-2026-13133 The CVSS evaluation above assumes that a victim user is directed to download and place a specially crafted DLL file alongside the affected installer and then invoke the installer. Yukihiro Nakamura reported this vulnerability to IPA. JPCERT/CC coordinated w...

Entity
JVN iPedia
Sector
enterprise-software
Scoring reasons
public-vulnerability-record, japan-jvn-ipedia
japanjvnjvn-ipediavulnerabilityCVE-2026-13133enterprise-softwareInstallerLINE
70score

2026-08-05 / Governance / Japan JVN iPedia

Multiple vulnerabilities in NetKids iMark

NetKids iMark provided by Integrated Systems Technologies, Inc. contains multiple vulnerabilities listed below: Uncontrolled search path element (CWE-427) - CVE-2026-66344 Unquoted search path or element (CWE-428) - CVE-2026-66839 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

Entity
JVN iPedia
Sector
vulnerability-intelligence
Scoring reasons
public-vulnerability-record, japan-jvn-ipedia
japanjvnjvn-ipediavulnerabilityCVE-2026-66344CVE-2026-66839vulnerability-intelligenceMultiple
70score

2026-08-05 / Governance / Japan JVN iPedia

Multiple vulnerabilities in DEEBOT PRO M1, DEEBOT PRO K1VAC and ECOVACS PRO App

Robotic cleaners DEEBOT PRO M1 and DEEBOT PRO K1VAC, and mobile app ECOVACS PRO App developed by ECOVACS ROBOTICS contain multiple vulnerabilities. They are provided in Japan by Hellohas Robotics Inc. web server for debugging purposes remains enabled (CWE-489) - CVE-2026-66403 Missing server certificate verification in MQTT communications (CWE-295) - CVE-2026-66404 telnet server remains enabled (CWE-489) - CVE-202...

Entity
JVN iPedia
Sector
network-and-edge-devices
Scoring reasons
public-vulnerability-record, japan-jvn-ipedia
japanjvnjvn-ipediavulnerabilityCVE-2026-66403CVE-2026-66404CVE-2026-66405CVE-2026-66406
70score

2026-08-05 / Governance / Japan JVN iPedia

Vulnerability in Cosminexus HTTP Server

Vulnerability(CVE-2026-49975) has been found in Cosminexus HTTP Server. This vulnerability does not apply if HTTP/2 protocol is disabled.

Entity
JVN iPedia
Sector
enterprise-software
Scoring reasons
public-vulnerability-record, japan-jvn-ipedia
japanjvnjvn-ipediavulnerabilityCVE-2026-49975enterprise-softwareVulnerabilityCosminexus
70score

2026-08-05 / Governance / Japan JVN iPedia

Vulnerability in Cosminexus HTTP Server

Vulnerability(CVE-2026-48913) has been found in Cosminexus HTTP Server. This vulnerability does not apply if HTTP/2 protocol is disabled.

Entity
JVN iPedia
Sector
enterprise-software
Scoring reasons
public-vulnerability-record, japan-jvn-ipedia
japanjvnjvn-ipediavulnerabilityCVE-2026-48913enterprise-softwareVulnerabilityCosminexus
70score

2026-08-05 / Governance / Japan JVN iPedia

Vulnerability in Cosminexus HTTP Server and Hitachi Web Server

Vulnerability(CVE-2026-43951) has been found in Cosminexus HTTP Server and Hitachi Web Server.

Entity
JVN iPedia
Sector
enterprise-software
Scoring reasons
public-vulnerability-record, japan-jvn-ipedia
japanjvnjvn-ipediavulnerabilityCVE-2026-43951enterprise-softwareVulnerabilityCosminexus
70score

2026-08-05 / Governance / Japan JVN iPedia

Multiple Vulnerabilities in Hitachi Ops Center Common Services

Multiple vulnerabilities exist in Hitachi Ops Center Common Services. CVE-2025-10939, CVE-2025-11537, CVE-2025-11538, CVE-2025-12110, CVE-2025-13467, CVE-2025-13881, CVE-2025-14082, CVE-2025-14083, CVE-2025-14777, CVE-2025-66560, CVE-2026-0707, CVE-2026-0871, CVE-2026-0976, CVE-2026-1035, CVE-2026-1190, CVE-2026-2092, CVE-2026-2575, CVE-2026-2673, CVE-2026-3009, CVE-2026-3121, CVE-2026-3429, CVE-2026-3872, CVE-202...

Entity
JVN iPedia
Sector
vulnerability-intelligence
Scoring reasons
public-vulnerability-record, japan-jvn-ipedia
japanjvnjvn-ipediavulnerabilityCVE-2025-10939CVE-2025-11537CVE-2025-11538CVE-2025-12110
70score

2026-08-05 / Governance / Japan JVN iPedia

Vulnerability in Cosminexus HTTP Server and Hitachi Web Server

Vulnerability(CVE-2026-33523) has been found in Cosminexus HTTP Server and Hitachi Web Server.

Entity
JVN iPedia
Sector
enterprise-software
Scoring reasons
public-vulnerability-record, japan-jvn-ipedia
japanjvnjvn-ipediavulnerabilityCVE-2026-33523enterprise-softwareVulnerabilityCosminexus
70score

2026-08-04 / Governance / Japan JVN iPedia

freo2 vulnerable to unrestricted upload of file with dangerous type

freo2 provided by refirio is a content management system written in PHP. freo2 contains the following vulnerability. Unrestricted upload of file with dangerous type (CWE-434) - CVE-2026-67243 Kazuki Ozawa of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

Entity
JVN iPedia
Sector
enterprise-software
Scoring reasons
public-vulnerability-record, japan-jvn-ipedia
japanjvnjvn-ipediavulnerabilityCVE-2026-67243enterprise-softwarePHPUnrestricted
70score

2026-08-04 / Governance / Japan JVN iPedia

CSV file injection vulnerability in BaserCMS

BaserCMS provided by baserCMS Users Community contains the following vulnerability. Improper neutralization of formula elements in a CSV file (CWE-1236) - CVE-2026-65875 This vulnerability was reported by the following persons to JPCERT/CC. JPCERT/CC coordinated with the developer. VCSLab - Viettel Cyber Security quanlna2 (Le Nguyen Anh Quan) VCSLab - Viettel Cyber Security namdi (Do Ich Nam) VCSLab - Viettel Cybe...

Entity
JVN iPedia
Sector
vulnerability-intelligence
Scoring reasons
public-vulnerability-record, japan-jvn-ipedia
japanjvnjvn-ipediavulnerabilityCVE-2026-65875vulnerability-intelligenceCSVBaserCMS
70score

2026-08-04 / Governance / Japan JVN iPedia

Sharp Network Scanner Tool insecure initial configuration

Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation are Windows applications which work as FTP servers and accept scan outputs from MFPs. With the initial configuration, anyone can upload files unlimitedly without authentication. Initialization of a Resource with an Insecure Default (CWE-1188) - CVE-2026-62416 Deniz Güney Yıldırım reported this vulnerability to Sharp Corporation and co...

Entity
JVN iPedia
Sector
network-and-edge-devices
Scoring reasons
public-vulnerability-record, japan-jvn-ipedia
japanjvnjvn-ipediavulnerabilityCVE-2026-62416network-and-edge-devicesSharpNetwork
70score

2026-08-04 / Governance / Japan JVN iPedia

Multiple vulnerabilities in Sharp and Toshiba Tec MFPs

Sharp and Toshiba Tec MFPs (multifunction printers) contain multiple vulnerabilities listed below. User authentication can be bypassed with crafted URLs (CWE-425) - CVE-2026-60011 Incomplete cleanup of cached files (CWE-459) - CVE-2026-63545 Insecure initial configuration (CWE-1188) - CVE-2026-63563 The products for a certain market have been shipped with the user authentication feature disabled in the initial con...

Entity
JVN iPedia
Sector
vulnerability-intelligence
Scoring reasons
public-vulnerability-record, japan-jvn-ipedia
japanjvnjvn-ipediavulnerabilityCVE-2026-60011CVE-2026-63545CVE-2026-63563vulnerability-intelligence
70score

2026-08-03 / Governance / Japan JVN iPedia

Cybozu Garoon vulnerable to cross-site scripting

Scheduler in Cybozu Garoon provided by Cybozu, Inc contains the following vulnerability: Cross-Site Scripting (CWE-79) - CVE-2026-57279 CyCDB-4148 Cybozu, Inc reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Cybozu, Inc coordinated under the Information Security Early Warning Partnership.

Entity
JVN iPedia
Sector
vulnerability-intelligence
Scoring reasons
public-vulnerability-record, japan-jvn-ipedia
japanjvnjvn-ipediavulnerabilityCVE-2026-57279vulnerability-intelligenceCybozuGaroon