ZeroDay Findings
Sign inSign up

Findings

CVE-2026-27947

Group-Office is an enterprise customer relationship management and groupware tool.

Published Feb 27, 2026 · updated Jun 17, 2026 · intermesh group-office

Group-Office is an enterprise customer relationship management and groupware tool. Versions prior to 26.0.9, 25.0.87, and 6.8.154 have an authenticated Remote Code Execution vulnerability in the TNEF attachment processing flow. The vulnerable path extracts attacker-controlled files from and then invokes with a shell wildcard ( ). Because extracted filenames are attacker-controlled, they can be interpreted as options and lead to arbitrary command execution. Versions 26.0.9, 25.0.87, and 6.8.154 fix the issue.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Feb 27, 2026 · NIST NVD

    Detected

    Group-Office is an enterprise customer relationship management and groupware tool. Versions prior to 26.0.9, 25.0.87, and 6.8.154 have an authenticated Remote Code Execution vulnerability in the TNEF attachment processing flow. The vulnerable path extracts attacker-controlled files from and then invokes with a shell wildcard ( ). Because extracted filenames are attacker-controlled, they can be int

  2. Jun 17, 2026 · NIST NVD

    Updated

    Group-Office is an enterprise customer relationship management and groupware tool. Versions prior to 26.0.9, 25.0.87, and 6.8.154 have an authenticated Remote Code Execution vulnerability in the TNEF attachment processing flow. The vulnerable path extracts attacker-controlled files from and then invokes with a shell wildcard ( ). Because extracted filenames are attacker-controlled, they can be int

Affected

  • cpe intermesh/group-officeversion unspecified

Sources

  • NIST NVDVulnerability recordCVE-2026-27947

    Group-Office is an enterprise customer relationship management and groupware tool. Versions prior to 26.0.9, 25.0.87, and 6.8.154 have an authenticated Remote Code Execution vulnerability in the TNEF attachment processing flow. The vulnerable path extracts attacker-controlled fil

    nvd.nist.gov

References