CVE-2026-27823: Egroupware

High severity, CVSS 8.7. EPSS: 1% chance of exploitation in the next 30 days.

A vulnerability has been identified in EGroupware that may lead to Remote Code Execution (RCE). The issue allows an authenticated attacker to execute arbitrary commands on the server. If user self-registration is enabled, the vulnerability may be exploitable without prior authentication. The vulnerability stems from improper authorization checks combined with a file write primitive and an arbitrary file read vulnerability, which together enable full system compromise. This has been patched in versions 26.2.20260224 and 23.1.20260224.

Affected products

• Egroupware Egroupware: up to and including 26.2.20260216; up to and including 23.1.20260131

Published 2026-07-20. Last modified 2026-07-22.