CVE-2026-125390 | Intermesh Group-Office up to 6.8.180/25.0.115/26.0.57 Upload Queue Processing actionProcessUploadQueue blobs path traversal

November 10, 2026 Yanac

A vulnerability was found in Intermesh Group-Office up to 6.8.180/25.0.115/26.0.57 and classified as problematic. Affected by this vulnerability is the function FolderController::actionProcessUploadQueue of the component Upload Queue Processing. Executing a manipulation of the argument blobs can lead to path traversal.

The identification of this vulnerability is CVE-2026-125390. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More