egroupware/egroupware vulnerabilities
CVEs whose affected-version data names the egroupware/egroupware package (composer). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-27823CriticalEGroupware has a Remote Code Execution Vulnerability
EGroupware has a Remote Code Execution Vulnerability
▾ Midnightegroupware · egroupware/egroupwareEPSS 1.0%via GHSA
CVE-2026-40187HighEGroupware has Authenticated RCE via Malicious eTemplate Upload
EGroupware has Authenticated RCE via Malicious eTemplate Upload
▾ Twilightegroupware · egroupware/egroupwareEPSS 0.93%via GHSA
CVE-2026-45016Medium· 6.5EGroupware Vulnerable to Local File Inclusion via file:// URI in Mail Compose
EGroupware Vulnerable to Local File Inclusion via file:// URI in Mail Compose
▾ Sunlitegroupware · egroupware/egroupwarevia GHSA