Kerio Connect vulnerability CVE-2026-112353, a stored XSS flaw via SVG attachments, is exploited in the wild to steal mailboxes. Update to 10.0.8p2. Related Posts: Apache Kafka Fixes 12 Vulnerabilities, Including a JWT Bypass That Grants Full Cluster Access FreeSWITCH Vulnerability CVE-2026-116779 Exploited in the Wild to Run Commands Details and PoC Exploit Released for Jackson-Databind Flaw CVE-2026-110879 (CVSS 9.8) The post Kerio Connect Vulnerability CVE-2026-112353 Exploited in the Wild