RCE in Egroupware
CVE-2026-40187
In egroupware version 26.0 and earlier, an authenticated administrator can achieve OS-level Remote Code Execution (RCE) by uploading a malicious eTemplate XML file (`.xet`) to the VFS `/etemplates` mount. The `Widget::expand_name()` method…
Vulnerability class: Command Injection (OS Command Injection)
Affected products
- Egroupware — versions <= 26.0
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)