Vulnerabilities

TI-2026-54285 CVE-2026-78032 · GHSA-69j4-4rqg-85f9

Deserialization of untrusted data in Tsuyoshi Saito SOY CMS

MEDIUM 49

SOY CMS contains an issue with deserialization of untrusted data.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00612 Published 2026-08-28 No fix listed CWE-502

TI-2026-54414 CVE-2026-78238 · GHSA-crj8-8cwj-v6mf

LOW 22

SOY Gallery contains a cross-site scripting vulnerability.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00236 Published 2026-08-28 No fix listed CWE-79

TI-2026-54205 CVE-2026-77838 · GHSA-8559-r562-94j2

LOW 22

SOY Calendar contains a cross-site scripting vulnerability.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00236 Published 2026-08-28 No fix listed CWE-79

TI-2026-51859 CVE-2026-73827 · GHSA-p9g2-m7rg-67r7

LOW 22

SOY Calendar contains a cross-site scripting vulnerability.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00236 Published 2026-08-28 No fix listed CWE-79