Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 2 total.
Library:
egroupware/egroupware
CVE-2026-40187
HIGH
CVSS 8.6
Verified Advisory
Jul 20, 2026
Authenticated RCE via malicious eTemplate upload in EGroupware (CVE-2026-40187)
An authenticated administrator can achieve OS-level remote code execution by uploading a malicious eTemplate XML file (`.xet`) to the VFS `/etemplates` mount. The `Widget::expand_name()` method in `api/src/Etemplate/W...
Fixed in 26.4.20260413; 23.1.20260601
Command Injection
RCE
PHP
Docker
CVE-2026-27823
HIGH
CVSS 8.7
Verified Advisory
Jul 20, 2026
Remote code execution via authorization bypass in EGroupware (CVE-2026-27823)
EGroupware contains an improper authorization check in `SmallPartMediaRecorder::ajax_upload()` that allows an attacker to bypass teacher-role verification by supplying a crafted `participant_role` value in request dat...
Fixed in 26.2.20260224; 23.1.20260224
File Upload
Path Traversal
RCE
PHP