Vulnerabilities in Intermesh
26 resultsCVE-2025-48992MEDIUMGroup-Office vulnerable to blind XSSEPSS 0.3%CVE-2026-125388HIGHGroup-Office before 6.8.181, 25.0.116, and 26.0.58 Missing Authorization in Forms Report DownloadEPSS 0.2%CVE-2026-45551MEDIUMGroup-Office: Authenticated Stored XSS in Administrator Context via Arbitrary Cross-User Setting WriteEPSS 0.2%CVE-2026-63010HIGHGroup-Office: Stored XSS via Manual RemindersEPSS —CVE-2026-63653MEDIUMGroup-Office: SSRF via Bookmark/description JMAP action — server makes arbitrary HTTP(S) requests to user-controlled URL and reflects part of the responseEPSS —CVE-2026-63011CRITICALGroupOffice Vulnerable to RCE in TemplateParser eval() via Contact/labelsEPSS —