critical9.3
CVE-2026-27823
A vulnerability has been identified in EGroupware that may lead to Remote Code Execution (RCE).
Impact
A vulnerability has been identified in EGroupware that may lead to Remote Code Execution (RCE). The issue allows an authenticated attacker to execute arbitrary commands on the server. If user self-registration is enabled, the vulnerability may be exploitable without prior authentication. The vulnerability stems from improper authorization checks combined with a file write primitive and an arbitrary file read vulnerability, which together enable full system compromise. This has been patched in versions 26.2.20260224 and 23.1.20260224.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | egroupware/egroupware | >= 26.0.20251208, < 26.2.20260224 | 26.2.20260224 |