SB2026110991 - Server-Side Request Forgery (SSRF) in Group Office

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026110991

SB2026110991 - Server-Side Request Forgery (SSRF) in Group Office

Published: November 9, 2026

Security Bulletin ID SB2026110991
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Information disclosure

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Server-Side Request Forgery (SSRF) (CVE-ID: N/A)

CWE-ID: CWE-918 - Server-Side Request Forgery (SSRF)

CVSSv4: 0 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a highly privileged attacker to probe loopback or internal HTTP services through the Group Office server.

The vulnerability exists due to missing destination safety checks in WOPI discovery when users with WOPI configuration permissions save or update service URLs. A highly privileged attacker can supply an internal destination to trigger a server-side request to /hosting/discovery and use discovery success or failure as a probing signal.


Remediation

Install update from vendor's website.

References