Intermesh Group-office — known CVE vulnerabilities

Every CVE whose affected-product data names Intermesh Group-office, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (12)

• CVE-2026-34838 — CVSS 9.9 (critical): Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.156, 25.0.90, and 26.0.12, a…
• CVE-2026-27832 — CVSS 8.8 (high): Group-Office is an enterprise customer relationship management and groupware tool. Versions prior to 26.0.8, 25.0.87, and 6.8.153 have a…
• CVE-2026-27947 — CVSS 8.8 (high): Group-Office is an enterprise customer relationship management and groupware tool. Versions prior to 26.0.9, 25.0.87, and 6.8.154 have an…
• CVE-2026-33755 — CVSS 8.8 (high): Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.158, 25.0.92, and 26.0.17, an…
• CVE-2010-3428 — CVSS 7.5 (high): SQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows remote attackers to execute arbitrary SQL…
• CVE-2026-30237 — CVSS 6.1 (medium): Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.155, 25.0.88, and 26.0.10, there…
• CVE-2026-30238 — CVSS 6.1 (medium): Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.155, 25.0.88, and 26.0.10, there…
• CVE-2025-48993 — CVSS 6.1 (medium): Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.123 and 25.0.27, a malicious…
• CVE-2025-48369 — CVSS 5.4 (medium): Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.119 and 25.0.20, a persistent…
• CVE-2025-48366 — CVSS 5.4 (medium): Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.119 and 25.0.20, a stored and…
• CVE-2025-48368 — CVSS 5.4 (medium): Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.119 and 25.0.20, a DOM-based…
• CVE-2025-48992 — CVSS 4.8 (medium): Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.123 and 25.0.27, a stored and…