Login Request a demo
GR
Product
Group-Office
by Intermesh · last CVE Oct 22, 2026
14
CVEs
0
On KEV
9.9
Max CVSS
1
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 1High 5Medium 7Low 0
Severity
All severities14Critical1High5Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Group-Office to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33755
8.8
0%
Mar 27
Authenticated SQL Injection in Contact/query addressBookIds filter
Affected: before 6.8.158; 25.0.1 before 25.0.92; 26.0.1 before 26.0.17
CVE-2026-27947
8.8
1%
Feb 27
Group-Office Vulnerable to Remote Code Execution (RCE)
Affected: before 6.8.154; 25.0.1 before 25.0.87; 26.0.1 before 26.0.9
CVE-2026-27832
8.8
0%
Feb 27
Group-Office Has Authenticated SQL Injection in advancedQueryData.comparator
Affected: before 6.8.153; 25.0.1 before 25.0.87; 26.0.1 before 26.0.8
CVE-2023-46730
8.8
1%
Nov 7
Server-Side Request Forgery in groupoffice
Affected: 6.30 before 6.6.177; 6.70 before 6.7.54; 6.80 before 6.8.15
CVE-2018-25438
7.5
1%
Oct 22
Intermesh Group-Office < 3.5.5 Path Traversal via compress.php
Affected: 3.3.0 before 3.5.5
Showing 5