CVE-2026-112353 - GFI KerioConnect < 10.0.8p2 Stored XSS via SVG Attachment
CVE ID :CVE-2026-112353 Published : Oct. 27, 2026, 5:16 p.m. | 1 hour, 7 minutes ago Description :GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component that allows a remote attacker to run JavaScript in a victim's...