CVE-2026-57279 is a cross-site scripting vulnerability in Cybozu Garoon version 6.17.0. Successful exploitation enables an attacker to execute arbitrary scripts in the context of a logged-in user's browser, potentially leading to unauthorized actions or data exposure. The vulnerability has a CVSS 3.0 base score of 6.8, reflecting medium severity with network attack vector, low attack complexity, requiring privileges and user interaction, and impacting integrity with no confidentiality or availability impact. No official remediation or patch has been disclosed by the vendor as of the publication date.

Exploitation of this vulnerability can result in arbitrary script execution within the browser of an authenticated user, potentially allowing attackers to perform unauthorized actions or manipulate data within the application session. There is no direct impact on confidentiality or availability reported. The attack requires the victim to be logged in and interact with malicious content.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with untrusted content and links while logged into Cybozu Garoon 6.17.0. Monitor vendor communications for updates on patches or mitigations.