Group-office vulnerabilities
We track 3 vulnerabilities in Group-office products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on February 4, 2026.
Latest Group-office vulnerabilities
- 8.8 High severity
groupoffice: Improper Neutralization of Special Elements used in an OS Command
Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.150, 25.0.82, and 26.0.5, there is a remote code execution (RCE) vulnerability in Group-Office. The endpoint email/message/tnefAttachmentFromTempFile direc
- 8.8 High severity
groupoffice: Improper Neutralization of Argument Delimiters in a Command
Group-Office is an enterprise customer relationship management and groupware tool. Prior to 6.8.150, 25.0.82, and 26.0.5, the MaintenanceController exposes an action zipLanguage which takes a lang parameter and passes it directly to a system zip command via ex
- 8.8 High severity
Group Office: Improper Neutralization of Special Elements used in a Command
An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitrary code via the dbToApi() and eval() in the FunctionField.php