CVE-2026-25134

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-25134
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-25134.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-25134
Aliases
  • GHSA-v39j-549w-8849
Published
2026-02-02T22:40:15.094Z
Modified
2026-03-13T04:10:43.839933Z
Severity
  • 9.4 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CVSS Calculator
Summary
Group-Office Argument Injection in MaintenanceController::actionZipLanguage
Details

Group-Office is an enterprise customer relationship management and groupware tool. Prior to 6.8.150, 25.0.82, and 26.0.5, the MaintenanceController exposes an action zipLanguage which takes a lang parameter and passes it directly to a system zip command via exec(). This can be combined with uploading a crafted zip file to achieve remote code execution. This vulnerability is fixed in 6.8.150, 25.0.82, and 26.0.5.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-88"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25134.json"
}
References

Affected packages

Git / github.com/intermesh/groupoffice

Affected ranges

Type
GIT
Repo
https://github.com/intermesh/groupoffice
Events
Introduced
3c64605e5d45b524915be331b2de97cd04858cb6
Fixed
47e71723522bd1bd738817a0dae1184e1740e7a3

Affected versions

v26.*
v26.0.1
v6.*
v6.8.146
v6.8.147
v6.8.148
v6.8.149

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-25134.json"