CVE Intelligence

SHIRASAGI Project vulnerabilities

🔔 Create alert RSS

Published CVEs affecting SHIRASAGI Project products: 2 record(s), with severity, exploitation and fixes.

SHIRASAGI 2

Exploited only (KEV) →

CVE-2026-82582 Medium · 4.3 CWE-639 Sep 10, 2026
Authorization Bypass Through User-Controlled Key (IDOR) in SHIRASAGI Project SHIRASAGI
An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorized attacker to retrieve files from the groupware's shared file feature.
CVE-2026-81635 Medium · 5.4 CWE-79 Sep 10, 2026
Cross-site Scripting (XSS) in SHIRASAGI Project SHIRASAGI
A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in the web browser of a user who accesses a website using the affected product.