Tag

Cve-2026-112353

1 brief RSS

GFI KerioConnect: Stored Cross-Site Scripting in Webmail (CVE-2026-112353)

GFI KerioConnect versions before 10.0.8 Patch 2 are susceptible to stored XSS via maliciously crafted SVG attachments, allowing attackers to execute arbitrary JavaScript in authenticated user sessions.

KerioConnect cve-2026-112353 xss webmail data-theft

2t 1c 19m ago