CVE-2026-57279 is a cross-site scripting vulnerability in Cybozu Garoon 6.17.0. Successful exploitation enables an attacker to execute arbitrary scripts in the context of a logged-in user's browser. The vulnerability has a CVSS 3.0 base score of 6.8, indicating medium severity, with attack vector network, low attack complexity, requiring privileges and user interaction, and causing impact on integrity but not confidentiality or availability. No vendor advisory or patch information is currently available, and the product is not a cloud service.

If exploited, an attacker can execute arbitrary scripts in the web browser of an authenticated user, potentially leading to unauthorized actions performed with the user's privileges. There is no indication of impact on confidentiality or availability. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution with untrusted content and links within the application. Monitor official Cybozu communications for updates.