Skip to content
OpenAdvisories

Vendor

Intermesh

26 known vulnerabilities.

Products

groupoffice 19 Group-Office 7
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-34838 Public exploit

    Group-Office: Authenticated Remote Code Execution via PHP Insecure Deserialization in `AbstractSettingsCollection`

    Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.156, 25.0.90, and 26.0.12, a vulnerability in the AbstractSettingsCollection model leads to insecure deserialization when these settings are loaded. By in…

    Intermesh groupoffice
  • Critical 9.4
    CVE-2026-25512 Public exploit EPSS 20%

    Group-Office is vulnerable to RCE due to Command Injection via TNEF Attachment Handler

    Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.150, 25.0.82, and 26.0.5, there is a remote code execution (RCE) vulnerability in Group-Office. The endpoint email/message/tnefAttachmentFromTempFile dire…

    Intermesh groupoffice