CVE-2026-25134

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-25134

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-25134.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-25134

Aliases

GHSA-v39j-549w-8849

Published

2026-02-02T22:40:15.094Z

Modified

2026-07-15T01:49:18.475818592Z

Severity

9.4 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CVSS Calculator

Summary

Group-Office Argument Injection in MaintenanceController::actionZipLanguage

Details

Group-Office is an enterprise customer relationship management and groupware tool. Prior to 6.8.150, 25.0.82, and 26.0.5, the MaintenanceController exposes an action zipLanguage which takes a lang parameter and passes it directly to a system zip command via exec(). This can be combined with uploading a crafted zip file to achieve remote code execution. This vulnerability is fixed in 6.8.150, 25.0.82, and 26.0.5.

Database specific

{
    "cwe_ids": [
        "CWE-88"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25134.json",
    "cna_assigner": "GitHub_M"
}

References

Affected packages

Git / github.com/intermesh/groupoffice

Affected ranges

Type

GIT

Repo

https://github.com/intermesh/groupoffice

Events

Introduced

Fixed

47e71723522bd1bd738817a0dae1184e1740e7a3

Introduced

86a5e33c9c9adfc29537c29d42fb0029f456837b

Fixed

7dc617b95993d33a87dd9306d16b981cacc58bec

Introduced

3c64605e5d45b524915be331b2de97cd04858cb6

Fixed

2df647666712de52e4178d1feccc06ca84ebb62b

Fixed

d28490a6a29936db7888aa841ab8ade88800540b

Database specific

{
    "cpe": "cpe:2.3:a:group-office:group_office:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "6.8.150"
        },
        {
            "introduced": "25.0.1"
        },
        {
            "fixed": "25.0.82"
        },
        {
            "introduced": "26.0.1"
        },
        {
            "fixed": "26.0.5"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

v25.*

v25.0.10

v25.0.11

v25.0.12

v25.0.14

v25.0.15

v25.0.16

v25.0.20

v25.0.21

v25.0.22

v25.0.23

v25.0.25

v25.0.27

v25.0.28

v25.0.29

v25.0.30

v25.0.32

v25.0.34

v25.0.35

v25.0.36

v25.0.37

v25.0.38

v25.0.39

v25.0.40

v25.0.46

v25.0.47

v25.0.48

v25.0.49

v25.0.50

v25.0.51

v25.0.52

v25.0.53

v25.0.55

v25.0.56

v25.0.58

v25.0.59

v25.0.61

v25.0.62

v25.0.64

v25.0.66

v25.0.67

v25.0.68

v25.0.69

v25.0.70

v25.0.71

v25.0.72

v25.0.74

v25.0.75

v25.0.76

v25.0.78

v25.0.79

v25.0.80

v25.0.81

v25.0.9

v26.*

v26.0.4

v6.*

v6.3.1

v6.3.10

v6.3.11

v6.3.12

v6.3.14

v6.3.3

v6.3.4

v6.3.5

v6.3.6

v6.3.7

v6.3.8

v6.4.23

v6.4.25

v6.4.26

v6.4.27

v6.4.28

v6.4.29

v6.4.30

v6.4.31

v6.4.32

v6.4.33

v6.4.34

v6.4.35

v6.4.36

v6.4.37

v6.4.38

v6.4.39

v6.4.40

v6.4.41

v6.4.42

v6.4.43

v6.4.44

v6.4.49

v6.4.50

v6.4.51

v6.5.30

v6.5.31

v6.5.32

v6.5.33

v6.5.34

v6.5.35

v6.5.36

v6.5.37

v6.5.38

v6.5.39

v6.5.41

v6.5.42

v6.5.43

v6.5.44

v6.5.45

v6.5.46

v6.5.47

v6.5.48

v6.5.49

v6.5.50

v6.5.51

v6.5.52

v6.5.53

v6.5.54

v6.5.55

v6.5.56

v6.5.57

v6.5.58

v6.5.59

v6.5.60

v6.5.61

v6.5.62

v6.5.63

v6.5.64

v6.5.65

v6.5.66

v6.5.67

v6.5.68

v6.5.69

v6.5.70

v6.5.71

v6.5.72

v6.5.73

v6.5.74

v6.5.75

v6.5.76

v6.5.77

v6.5.78

v6.5.79

v6.5.80

v6.5.81

v6.5.82

v6.5.84

v6.5.85

v6.5.86

v6.5.88

v6.5.89

v6.5.90

v6.5.91

v6.5.92

v6.5.93

v6.5.95

v6.5.96

v6.6.100

v6.6.102

v6.6.103

v6.6.104

v6.6.105

v6.6.106

v6.6.107

v6.6.110

v6.6.117

v6.6.118

v6.6.119

v6.6.124

v6.6.125

v6.6.126

v6.6.127

v6.6.128

v6.6.129

v6.6.130

v6.6.131

v6.6.132

v6.6.133

v6.6.134

v6.6.135

v6.6.136

v6.6.137

v6.6.138

v6.6.139

v6.6.140

v6.6.141

v6.6.143

v6.6.27

v6.6.28

v6.6.29

v6.6.30

v6.6.31

v6.6.32

v6.6.33

v6.6.34

v6.6.35

v6.6.36

v6.6.37

v6.6.38

v6.6.39

v6.6.40

v6.6.41

v6.6.42

v6.6.43

v6.6.44

v6.6.45

v6.6.46

v6.6.47

v6.6.48

v6.6.49

v6.6.50

v6.6.51

v6.6.52

v6.6.53

v6.6.54

v6.6.55

v6.6.56

v6.6.57

v6.6.58

v6.6.59

v6.6.60

v6.6.61

v6.6.62

v6.6.63

v6.6.64

v6.6.65

v6.6.66

v6.6.67

v6.6.68

v6.6.69

v6.6.70

v6.6.71

v6.6.72

v6.6.81

v6.6.82

v6.6.83

v6.6.84

v6.6.85

v6.6.86

v6.6.87

v6.6.88

v6.6.89

v6.6.90

v6.6.91

v6.6.92

v6.6.93

v6.6.94

v6.6.95

v6.6.96

v6.6.97

v6.6.98

v6.6.99

v6.7.10

v6.7.11

v6.7.12

v6.7.13

v6.7.14

v6.7.15

v6.7.17

v6.7.19

v6.7.20

v6.7.22

v6.7.24

v6.7.25

v6.7.26

v6.7.27

v6.7.28

v6.7.29

v6.7.30

v6.7.31

v6.7.32

v6.7.33

v6.7.35

v6.7.36

v6.7.37

v6.7.38

v6.7.39

v6.7.40

v6.7.41

v6.7.42

v6.7.43

v6.7.44

v6.7.8

v6.7.9

v6.8.10

v6.8.100

v6.8.101

v6.8.102

v6.8.104

v6.8.105

v6.8.106

v6.8.107

v6.8.109

v6.8.11

v6.8.114

v6.8.116

v6.8.117

v6.8.118

v6.8.12

v6.8.120

v6.8.121

v6.8.122

v6.8.123

v6.8.124

v6.8.125

v6.8.126

v6.8.127

v6.8.128

v6.8.129

v6.8.130

v6.8.131

v6.8.132

v6.8.133

v6.8.134

v6.8.135

v6.8.139

v6.8.14

v6.8.141

v6.8.142

v6.8.146

v6.8.147

v6.8.15

v6.8.16

v6.8.17

v6.8.18

v6.8.19

v6.8.21

v6.8.23

v6.8.24

v6.8.25

v6.8.26

v6.8.28

v6.8.29

v6.8.30

v6.8.31

v6.8.32

v6.8.33

v6.8.34

v6.8.35

v6.8.37

v6.8.38

v6.8.39

v6.8.40

v6.8.41

v6.8.42

v6.8.43

v6.8.44

v6.8.45

v6.8.47

v6.8.49

v6.8.50

v6.8.54

v6.8.56

v6.8.57

v6.8.58

v6.8.59

v6.8.6

v6.8.60

v6.8.61

v6.8.62

v6.8.63

v6.8.64

v6.8.66

v6.8.69

v6.8.7

v6.8.70

v6.8.73

v6.8.76

v6.8.77

v6.8.79

v6.8.83

v6.8.84

v6.8.85

v6.8.87

v6.8.88

v6.8.9

v6.8.90

v6.8.93

v6.8.94

v6.8.95

v6.8.96

v6.8.97

v6.8.98

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-25134.json"