PatchTheCVEu-office force vulnerabilities and fixes
Recent CVEs affecting u-office force, with upgrade or downgrade steps. 5 tracked.
Also searched as: u office force, u-officeforce.
u-office force has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-03-02. Highest priority: CVE-2026-3422 (score 54/100).
- CVE-2025-12864 HIGH 8.8 UPGRADE U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote atta
- CVE-2025-12865 HIGH 8.8 UPGRADE U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote atta
- CVE-2026-3422 CRITICAL 9.8 UPGRADE U-Office Force developed by e-Excellence has a Insecure Deserialization vulnerability, allowing unauthenticate
- CVE-2025-2396 HIGH 8.8 UPGRADE The U-Office Force from e-Excellence has an Arbitrary File Upload vulnerability, allowing remote attackers wit
- CVE-2025-2395 CRITICAL 9.8 UPGRADE The U-Office Force from e-Excellence has an Improper Authentication vulnerability, allowing unauthenticated re
FAQ
How do I fix u-office force vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is u-office force being exploited right now?
None of the tracked u-office force CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which u-office force CVE should I patch first?
CVE-2026-3422 currently ranks highest (54/100): U-Office Force developed by e-Excellence has a Insecure Deserialization vulnerability, allowing unauthenticate.