Vulnerability Description
A vulnerability has been identified in EGroupware that may lead to Remote Code Execution (RCE). The issue allows an authenticated attacker to execute arbitrary commands on the server. If user self-registration is enabled, the vulnerability may be exploitable without prior authentication. The vulnerability stems from improper authorization checks combined with a file write primitive and an arbitrary file read vulnerability, which together enable full system compromise. This has been patched in versions 26.2.20260224 and 23.1.20260224.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-27823?
CVE-2026-27823 is a documented vulnerability. A vulnerability has been identified in EGroupware that may lead to Remote Code Execution (RCE). The issue allows an authenticated attacker to execute arbitrary commands on the server. If user self-reg...
How severe is CVE-2026-27823?
CVSS scoring is not yet available for CVE-2026-27823. Check NVD for updates.
Is there a patch for CVE-2026-27823?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.