CVE-2026-27823 — Remote Code Execution Vulnerability in EGroupware
A vulnerability has been identified in EGroupware that may lead to Remote Code Execution (RCE). The issue allows an authenticated attacker to execute arbitrary commands on the s…
Published: 2026-07-20 · CVSS: 8.7 · CVSS 4.0
A vulnerability has been identified in EGroupware that may lead to Remote Code Execution (RCE). The issue allows an authenticated attacker to execute arbitrary commands on the server. If user self-registration is enabled, the vulnerability may be exploitable without prior authentication. The vulnerability stems from improper authorization checks combined with a file write primitive and an arbitrary file read vulnerability, which together enable full system compromise. This has been patched in versions 26.2.20260224 and 23.1.20260224.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7