PatchTheCVEgroup-office vulnerabilities
Recent CVEs affecting group-office products. 7 tracked.
group-office has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2026-02-04. Highest priority: CVE-2026-25512 (score 63/100).
- CVE-2026-25512 HIGH 8.8 UPGRADE Group-Office is an enterprise customer relationship management and groupware tool
- CVE-2026-25511 MEDIUM 4.9 UPGRADE Group-Office is an enterprise customer relationship management and groupware tool
- CVE-2026-25134 HIGH 8.8 UPGRADE Group-Office is an enterprise customer relationship management and groupware tool
- CVE-2026-23887 MEDIUM 5.4 UPGRADE Group-Office is an enterprise customer relationship management and groupware tool
- CVE-2025-63406 HIGH 8.8 UPGRADE An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execu
- CVE-2025-53505 MEDIUM 5.3 UPGRADE Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a path traversal
- CVE-2025-53504 MEDIUM 5.4 UPGRADE Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a cross-site scri
FAQ
How do I fix group-office vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is group-office being exploited right now?
None of the tracked group-office CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which group-office CVE should I patch first?
CVE-2026-25512 currently ranks highest (63/100): Group-Office is an enterprise customer relationship management and groupware tool.