Auth bypass in Egroupware

CVE-2026-27823

A vulnerability has been identified in EGroupware that may lead to Remote Code Execution (RCE). The issue allows an authenticated attacker to execute arbitrary commands on the server. If user self-registration is enabled, the vulnerability…

Affected products

  • Egroupware — versions <= 26.2.20260216, <= 23.1.20260131

Weakness classification (CWE)

References