ZeroDay Findings
Sign inSign up

Findings

CVE-2026-27832

Group-Office is an enterprise customer relationship management and groupware tool.

Published Feb 27, 2026 · updated Jun 17, 2026 · intermesh group-office

Group-Office is an enterprise customer relationship management and groupware tool. Versions prior to 26.0.8, 25.0.87, and 6.8.153 have a SQL Injection (SQLi) vulnerability, exploitable through the parameter ( field) on an authenticated endpoint. The endpoint processes and forwards the SQL comparator without a strict allowlist into SQL condition building. This enables blind boolean-based exfiltration of the table. Versions 26.0.8, 25.0.87, and 6.8.153 fix the issue.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Feb 27, 2026 · NIST NVD

    Detected

    Group-Office is an enterprise customer relationship management and groupware tool. Versions prior to 26.0.8, 25.0.87, and 6.8.153 have a SQL Injection (SQLi) vulnerability, exploitable through the parameter ( field) on an authenticated endpoint. The endpoint processes and forwards the SQL comparator without a strict allowlist into SQL condition building. This enables blind boolean-based exfiltrati

  2. Jun 17, 2026 · NIST NVD

    Updated

    Group-Office is an enterprise customer relationship management and groupware tool. Versions prior to 26.0.8, 25.0.87, and 6.8.153 have a SQL Injection (SQLi) vulnerability, exploitable through the parameter ( field) on an authenticated endpoint. The endpoint processes and forwards the SQL comparator without a strict allowlist into SQL condition building. This enables blind boolean-based exfiltrati

Affected

  • cpe intermesh/group-officeversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-27832

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-27832

    Group-Office is an enterprise customer relationship management and groupware tool. Versions prior to 26.0.8, 25.0.87, and 6.8.153 have a SQL Injection (SQLi) vulnerability, exploitable through the parameter ( field) on an authenticated endpoint. Th

    nvd.nist.gov

References