SSRF in Intermesh Groupoffice

CVE-2026-25511

Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.150, 25.0.82, and 26.0.5, an authenticated user within the System Administrator group can trigger a full SSRF via the WOPI service dis…

Vulnerability class: SSRF (Server-Side Request Forgery)

EPSS: 0.000 (5.3th percentile) — read the EPSS interpretation.