CVE-2026-125390

Vendor

Intermesh

Product

Group-Office

CVSS v3.1

6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness

CWE-36

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 18
   CVE NVD 19h ago

   Group-Office before 6.8.181, 25.0.116, and 26.0.58 contains an arbitrary local file read vulnerability in FolderController::actionProcessUploadQueue…

   Group-Office before 6.8.181, 25.0.116, and 26.0.58 contains an arbitrary local file read vulnerability in FolderController::actionProcessUploadQueue that allows authenticated users to read server files by supplying absolute paths…

   CVSS 6.5 CVE-2026-125390 Intermesh