Login Request a demo
GO
Product
Group Office
by Group-office · last CVE Feb 4, 2026
15
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 0High 4Medium 11Low 0
Severity
All severities15Critical0High4Medium11Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Group Office to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-25512
8.8
20%
Feb 4
Group-Office is vulnerable to RCE due to Command Injection via TNEF Attachment Handler
Affected: before 6.8.150; 25.0.1 before 25.0.82; 26.0.1 before 26.0.5
CVE-2026-25134
8.8
1%
Feb 2
Group-Office Argument Injection in MaintenanceController::actionZipLanguage
Affected: before 6.8.150; 25.0.1 before 25.0.82; 26.0.1 before 26.0.5
CVE-2025-63406
8.8
1%
Nov 13
An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitrary code via the dbToApi() and eval() in the…
Affected: before 6.8.136; 25.0.1 before 25.0.47
CVE-2023-46730
8.8
1%
Nov 7
Server-Side Request Forgery in groupoffice
Affected: 6.3.1 before 6.6.177; 6.7.0 before 6.7.54; 6.8.0 before 6.8.15
Showing 4