VulnSocial

CVE-2026-112353

LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

Back to dashboard
0.0/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Peaked 1d ago at 1 mentions (2026-10-28); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-10-28: 1Mentions · 2026-10-29: 110-2810-29
Referenced assets2 URLs
Full discourse2 posts
  • Cyber Threat Observatory | Alan Turing Institute@TuringCyberObs

    CVE-2026-112353 affects GFI KerioConnect Webmail Stored XSS is actively exploited in the wild and can steal credentials, session tokens and mailbox data when a malicious SVG attachment is opened Analysis: https://github.com/alan-turing-institute/cyber-threat-observatory/blob/main/reports/2026-10-27/TIER_2_CVE-2026-112353.md #CyberSecurity #EmailSecurity #IdentitySecurity

    0001061
    65 followersView on X
  • Daily CyberSecurity@Daily_CyberSec

    Kerio Connect vulnerability CVE-2026-112353, a stored XSS flaw via SVG attachments, is exploited in the wild to steal mailboxes. Update to 10.0.8p2. #KerioConnect #GFI #CVE2026112353 #XSS #EmailSecurity #Proofpoint #ActiveExploitation #PatchNow https://securityonline.info/kerio-connect-vulnerability-cve-2026-112353-exploited/

    00000293
    13.1K followersView on X

Explore more

Back to dashboard