PT-2026-6304 · Unknown · Group-Office

Numberoreo1 · Published 2026-02-04 · Updated 2026-03-02 · CVE-2026-25512

Positive Technologies (AI Summary)

CVSS v4.0

9.4

Critical

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Group-Office versions prior to 6.8.150 Group-Office versions prior to 25.0.82 Group-Office versions prior to 26.0.5

Description Group-Office is a customer relationship management and groupware tool susceptible to remote code execution (RCE). The /email/message/tnefAttachmentFromTempFile endpoint directly incorporates the user-controlled tmp file parameter into an exec() function call. An authenticated attacker can inject shell metacharacters into the tmp file parameter, enabling the execution of arbitrary system commands on the server.

Recommendations Update Group-Office to version 6.8.150 or later. Update Group-Office to version 25.0.82 or later. Update Group-Office to version 26.0.5 or later.

Exploit

Fix

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-25512

GHSA-579W-JVG7-FRR4

Affected Products

Group-Office

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25512.json · Exploit
• 🔥 https://github.com/Intermesh/groupoffice/security/advisories/GHSA-579w-jvg7-frr4 · Exploit
• http://github.com/Intermesh/groupoffice/commit/6c612deca97a6cd2a1bd4feea0ce7e8e9d907792 · Patch
• https://osv.dev/vulnerability/CVE-2026-25512 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25512 · Security Note
• https://t.me/CVEtracker/43768 · Telegram Post
• https://twitter.com/CCBalert/status/2019440489162756166 · Twitter Post
• https://twitter.com/pdnuclei_bot/status/2028576108510359725 · Twitter Post
• https://twitter.com/CVEnew/status/2019182767368757611 · Twitter Post
• https://twitter.com/0dayPublishing/status/2019153118773080175 · Twitter Post