RCE in Egroupware

CVE-2026-40187

In egroupware version 26.0 and earlier, an authenticated administrator can achieve OS-level Remote Code Execution (RCE) by uploading a malicious eTemplate XML file (`.xet`) to the VFS `/etemplates` mount. The `Widget::expand_name()` method…

Vulnerability class: Command Injection (OS Command Injection)

Affected products

Weakness classification (CWE)

References