PatchTheCVEegroupware vulnerabilities and fixes
Recent CVEs affecting egroupware, with upgrade or downgrade steps. 4 tracked.
egroupware has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-01-28. Highest priority: CVE-2024-40614 (score 52/100).
- CVE-2026-22243 HIGH 8.8 UPGRADE EGroupware is a Web based groupware server written in PHP
- CVE-2024-40614 CRITICAL 9.8 UPGRADE EGroupware before 23.1.20240624 mishandles an ORDER BY clause
- CVE-2023-38329 MEDIUM 6.1 DOWNGRADE An issue was discovered in eGroupWare 17.1.20190111
- CVE-2023-38327 MEDIUM 5.3 DOWNGRADE An issue was discovered in eGroupWare 17.1.20190111
FAQ
How do I fix egroupware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is egroupware being exploited right now?
None of the tracked egroupware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which egroupware CVE should I patch first?
CVE-2024-40614 currently ranks highest (52/100): EGroupware before 23.1.20240624 mishandles an ORDER BY clause.