PT-2026-22390 · Unknown · Group-Office

Numberoreo1 · Published 2026-02-27 · Updated 2026-02-28 · CVE-2026-27947

Positive Technologies (AI Summary)

CVSS v4.0

9.4

Critical

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Group-Office versions prior to 26.0.9 Group-Office versions prior to 25.0.87 Group-Office versions prior to 6.8.154

Description Group-Office is a customer relationship management and groupware tool. Versions prior to 26.0.9, 25.0.87, and 6.8.154 contain a flaw that allows for authenticated Remote Code Execution through the processing of TNEF attachments. The issue arises because the software extracts files from winmail.dat which are controlled by an attacker. The zip command is then invoked with a shell wildcard (*), allowing attackers to manipulate filenames to execute arbitrary commands.

Recommendations Update Group-Office to version 26.0.9. Update Group-Office to version 25.0.87. Update Group-Office to version 6.8.154.

Exploit

Fix

Unrestricted File Upload

Argument Injection

Weakness Enumeration

CWE-434

CWE-88

Related Identifiers

CVE-2026-27947

GHSA-2RWH-9QP7-F92X

Affected Products

Group-Office

References · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27947.json · Exploit
• https://github.com/Intermesh/groupoffice/security/advisories/GHSA-2rwh-9qp7-f92x · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-27947 · Security Note
• https://osv.dev/vulnerability/CVE-2026-27947 · Vendor Advisory
• https://twitter.com/CVEnew/status/2027744249010139369 · Twitter Post