Skip to content
Threat Feed
Subscribe

Vendor

GFI

2 briefs RSS
high threat

GFI KerioConnect: Stored Cross-Site Scripting in Webmail (CVE-2026-112353)

GFI KerioConnect versions before 10.0.8 Patch 2 are susceptible to stored XSS via maliciously crafted SVG attachments, allowing attackers to execute arbitrary JavaScript in authenticated user sessions.

KerioConnect cve-2026-112353 xss webmail data-theft
2t 1c
medium threat

Kerberos Traffic from Unusual Process

Detects network connections to the standard Kerberos port from an unusual process other than lsass.exe, potentially indicating Kerberoasting or Pass-the-Ticket activity on Windows systems.

Elastic Defend +22 kerberoasting credential-access lateral-movement windows
2r 2t