Skip to content
Threat Feed
Subscribe

Product

KerioConnect (< 10.0.8 Patch 2)

1 brief RSS
high threat

GFI KerioConnect: Stored Cross-Site Scripting in Webmail (CVE-2026-112353)

GFI KerioConnect versions before 10.0.8 Patch 2 are susceptible to stored XSS via maliciously crafted SVG attachments, allowing attackers to execute arbitrary JavaScript in authenticated user sessions.

KerioConnect cve-2026-112353 xss webmail data-theft
2t 1c