Skip to content

CVE record · 1 source

CVE-2026-112353

CVSS 8.2

GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component that allows a…

Vendor: GFI USA, LLC
Product: GFI KerioConnect
CVSS v3.1: 8.2 AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N
EPSS: 0.002 (p16)
Weakness: CWE-79, CWE-83

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

37

CVE NVD 4d ago

GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component that allows a…

GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component that allows a remote attacker to run JavaScript in a victim's authenticated Webmail session by…

Exploited CVSS 8.2 CVE-2026-112353 GFI USA, LLC