CVE-2026-27823 — Remote Code Execution Vulnerability in EGroupware

Description (CNA)

A vulnerability has been identified in EGroupware that may lead to Remote Code Execution (RCE). The issue allows an authenticated attacker to execute arbitrary commands on the server. If user self-registration is enabled, the vulnerability may be exploitable without prior authentication. The vulnerability stems from improper authorization checks combined with a file write primitive and an arbitrary file read vulnerability, which together enable full system compromise. This has been patched in versions 26.2.20260224 and 23.1.20260224.

Affected (CNA)

Vendor / product	Versions
EGroupware / egroupware	affected <= 26.2.20260216; affected <= 23.1.20260131

CWE

CWE-285

References

https://github.com/EGroupware/egroupware/security/advisories/GHSA-h9qx-v5xp-ph8p

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.