What’s Vulnerable › Vulnerabilities

CVE-2026-82582

• Severity: medium (CVSS 5.3 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-10 · updated 2026-09-10
• Weakness: CWE-639

Description

An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorized attacker to retrieve files from the groupware's shared file feature.

Affected products

• SHIRASAGI Project SHIRASAGI: through v1.20.2

References

• https://jvn.jp/en/jp/JVN37476837/
• https://www.ss-proj.org/support/1710.html

Get alerted when CVE-2026-82582 or the next vulnerability affects your stack