CVE-2026-40187
1 advisory.
Packagist/egroupware/egroupware CVE-2026-40187: high, EPSS 0.86%
EGroupware has Authenticated RCE via Malicious eTemplate Upload
Action: Upgrade egroupware/egroupware to 23.1.20260601 or later.
composer require egroupware/egroupware:26.4.20260413composer require egroupware/egroupware:23.1.20260601Affected
| introduced | fixed | last affected |
|---|---|---|
| 26.0.20251208 | 26.4.20260413 | - |
| 0 | 23.1.20260601 | - |
Fixed versions
| 26.4.20260413 | 23.1.20260601 |
Sources
- osv: GHSA-8737-2x9g-xjj7
- https://github.com/EGroupware/egroupware/security/advisories/GHSA-8737-2x9g-xjj7
- https://github.com/EGroupware/egroupware
CVE-2026-40187 · published · modified · JSON