CVE-2026-34838: Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.156, 25.0.90, a

Group-Office, a business tool for managing customer relationships and shared calendars, has a security flaw in how it processes saved settings before version 6.8.156, 25.0.90, and 26.0.12. An authenticated attacker (someone with a login) can insert malicious data into settings that makes the application execute harmful code on the server by exploiting insecure deserialization (unsafe conversion of stored data back into executable objects).