Remote Code Execution Vulnerability in EGroupware
CVE-2026-27823

8.7HIGH

Key Information:

Vendor

Egroupware

Status
Egroupware
Vendor
CVE Published:
20 July 2026

What is CVE-2026-27823?

A severe vulnerability in EGroupware has been identified that allows an authenticated attacker to execute arbitrary commands on the server. If user self-registration is enabled, this vulnerability can potentially be exploited without prior authentication. The issue arises due to a combination of inadequate authorization checks, alongside a file write primitive and an arbitrary file read vulnerability, which together could lead to a complete system compromise. A patch has been released in versions 26.2.20260224 and 23.1.20260224 to address this issue.

Affected Version(s)

egroupware <= 26.2.20260216 <= 26.2.20260216

egroupware <= 23.1.20260131 <= 23.1.20260131

References

https://github.com/EGroupware/egroupware/security/advisor...
x_refsource_CONFIRM

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.