CVE-2026-27823highCWE-285

CVE-2026-27823: falha de alta gravidade em egroupware

Remote Code Execution Vulnerability in EGroupware

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar egroupware+ Monitorar egroupware/egroupware

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.7epss 1.0%
A vulnerability has been identified in EGroupware that may lead to Remote Code Execution (RCE). The issue allows an authenticated attacker to execute arbitrary commands on the server. If user self-registration is enabled, the vulnerability may be exploitable without prior authentication. The vulnerability stems from improper authorization checks combined with a file write primitive and an arbitrary file read vulnerability, which together enable full system compromise. This has been patched in versions 26.2.20260224 and 23.1.20260224.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
EGroupware · egroupware
CVEs relacionadas — egroupware

No mesmo produto, das mais perigosas para as menos.

CVE-2026-40187HIGHAuthenticated RCE via Malicious eTemplate Upload in EGroupwareEPSS 0.9%CVE-2026-22243HIGHEGroupware has SQL Injection in Nextmatch Filter ProcessingEPSS 0.4%