Threats Tagged 'cve-2026-25511'
View all threats tagged with 'cve-2026-25511'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-25511'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-25511 is a high-severity Server-Side Request Forgery (SSRF) vulnerability in Intermesh's Group-Office product affecting versions prior to 6.8.150, 25.0.82, and 26.0.5. An authenticated user with System Administrator privileges can exploit the WOPI service discovery URL to perform SSRF attacks, including accessing internal hosts and ports. The vulnerability allows exfiltration of SSRF response bodies via the built-in debug system, effectively making the SSRF visible and enabling full server-side file read. No user interaction is required beyond authentication, and the vulnerability does not require additional privileges beyond System Administrator access. Join the discussion | CVE Database V5 | 02/04/2026, 20:40:04 UTC Added: 02/04/2026, 20:45:10 UTC |
Showing 1 to 1 of 1 result