CVE-2026-73827 in SOY Calendar

Summary

by MITRE • 08/28/2026

SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsible: Jpcert
• Reservation: 08/24/2026
• Disclosure: 08/28/2026
• Moderation: accepted
• Entry: VDB-396520
• CPE: ready
• CWE: CWE-79 (confirmed)
• CVSS: 5.4 (CNA)
• EPSS: 0.00000
• KEV: no
• Activities: very low
• Sector: Agriculture, Education, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-73827
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-73827
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-73827/