Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Non-Owner Mailbox Permission report.Referenceshttps://www.manageengine.com/products/exchange-reports/advisory/CVE-2026-4108.html