CVE-2026-45016
1 advisory.
Packagist/egroupware/egroupware CVE-2026-45016: medium 6.5
EGroupware Vulnerable to Local File Inclusion via file:// URI in Mail Compose
Action: Upgrade egroupware/egroupware to 23.1.20260601 or later.
composer require egroupware/egroupware:26.5.20260507composer require egroupware/egroupware:23.1.20260601Affected
| introduced | fixed | last affected |
|---|---|---|
| 26.0.20251208 | 26.5.20260507 | - |
| 0 | 23.1.20260601 | - |
Fixed versions
| 26.5.20260507 | 23.1.20260601 |
Sources
- osv: GHSA-c8m7-r2jv-rw63
- https://github.com/EGroupware/egroupware/security/advisories/GHSA-c8m7-r2jv-rw63
- https://github.com/EGroupware/egroupware
CVE-2026-45016 · published · modified · JSON