Critical severityNVD Advisory· Published Jul 20, 2026· Updated Jul 21, 2026
Remote Code Execution Vulnerability in EGroupware
CVE-2026-27823
Description
A vulnerability has been identified in EGroupware that may lead to Remote Code Execution (RCE). The issue allows an authenticated attacker to execute arbitrary commands on the server. If user self-registration is enabled, the vulnerability may be exploitable without prior authentication. The vulnerability stems from improper authorization checks combined with a file write primitive and an arbitrary file read vulnerability, which together enable full system compromise. This has been patched in versions 26.2.20260224 and 23.1.20260224.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
egroupware/egroupwarePackagist | >= 26.0.20251208, < 26.2.20260224 | 26.2.20260224 |
egroupware/egroupwarePackagist | < 23.1.20260224 | 23.1.20260224 |
Affected products
1- Range: before 26.2.20260224 and 23.1.20260224
Patches
Vulnerability mechanics
References
2- github.com/advisories/GHSA-h9qx-v5xp-ph8pghsaADVISORY
- github.com/EGroupware/egroupware/security/advisories/GHSA-h9qx-v5xp-ph8pghsax_refsource_CONFIRMWEB
News mentions
0No linked articles in our index yet.