CVE-2026-27947: Group-Office Vulnerable to Remote Code Execution (RCE)
Group-Office is an enterprise customer relationship management and groupware tool. Versions prior to 26.0.9, 25.0.87, and 6.8.154 have an authenticated Remote Code Execution vulnerability in the TNEF attachment processing flow. The vulnerable path extracts attacker-controlled files from winmail.dat and then invokes zip with a shell wildcard (). Because extracted filenames are attacker-controlled, they can be interpreted as zip options and lead to arbitrary command execution. Versions 26.0.9, 25.0.87, and 6.8.154 fix the issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-27947?
CVE-2026-27947 is rated as a critical vulnerability due to its potential for Remote Code Execution on affected systems.
How do I fix CVE-2026-27947?
To fix CVE-2026-27947, upgrade Group-Office to versions 26.0.9, 25.0.87, or 6.8.154 or later.
What are the affected versions in CVE-2026-27947?
Affected versions for CVE-2026-27947 include all versions prior to 26.0.9, 25.0.87, and 6.8.154.
Can CVE-2026-27947 be exploited remotely?
Yes, CVE-2026-27947 can be exploited remotely if an attacker has valid authentication credentials.
What type of vulnerability is CVE-2026-27947 classified as?
CVE-2026-27947 is classified as a Remote Code Execution (RCE) vulnerability.