{"cvss":5.1,"datePublished":"","dateUpdated":"","description":"GFI KerioConnect < 10.0.9p2 XSS via Link Auto-Formatter | Affected: GFI USA / GFI KerioConnect | CVSS: 5.1 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: True","dueDate":"","exploited":true,"id":"CVE-2026-112356","kev_catalogs":["circl"],"knownRansomwareCampaignUse":"","product":"GFI KerioConnect","severity":"MEDIUM","source":"circl_kev","title":"CVE-2026-112356","vendor":""}