CVE lookup

CVE-2026-27823

Pruva has a verified reproduction for CVE-2026-27823: EGroupware contains an authorization bypass in SmallPartMediaRecorder::ajax_upload combined with arbitrary file write and file read primitives, enabling authenticated (or self-registered) attackers to overwrite header.inc.php and achieve remote code execution.. The canonical evidence record is REPRO-2026-00272.