CVE-2026-27832

Group-Office is an enterprise customer relationship management and groupware tool. Versions prior to 26.0.8, 25.0.87, and 6.8.153 have a SQL Injection (SQLi) vulnerability, exploitable through the `advancedQueryData` parameter (`comparator` field) on an authenticated endpoint. The endpoint `index.php?r=email/template/emailSelection` processes `advancedQueryData` and forwards the SQL comparator without a strict allowlist into SQL condition building. This enables blind boolean-based exfiltration of the `core_auth_password` table. Versions 26.0.8, 25.0.87, and 6.8.153 fix the issue.

• CWE-89

• https://github.com/Intermesh/groupoffice/security/advisories/GHSA-vfgv-8w8v-qpxrVendor Advisory

Published

Feb 27, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-27826MCP Atlassian is a Model Context Protocol (MCP) server for A…8.2
• CVE-2026-27828EVerest is an EV charging software stack. Prior to version 2…7.5
• CVE-2026-27829Astro is a web framework. In versions 9.0.0 through 9.5.3, a…7.2
• CVE-2026-2783Information disclosure due to JIT miscompilation in the Java…7.5
• CVE-2026-27830c3p0, a JDBC Connection pooling library, is vulnerable to at…8
• CVE-2026-27831rldns is an open source DNS server. Version 1.3 has a heap-b…7.5
• CVE-2026-27833Piwigo is an open source photo gallery application for the w…7.5
• CVE-2026-27834Piwigo is an open source photo gallery application for the w…7.2
• CVE-2026-27835wger is a free, open-source workout and fitness manager. In …4.3
• CVE-2026-27836phpMyFAQ is an open source FAQ web application. Prior to ver…7.5
• CVE-2026-27837Dottie provides nested object access and manipulation in Jav…9.8
• CVE-2026-27838wger is a free, open-source workout and fitness manager. Fiv…3.5