{"schema_version":1,"title":"Intermesh vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 10 vulnerabilities in Intermesh: 6 in the last 7 days and 7 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-63653, was published on 10 November 2026. 1 vulnerability in the last four weeks, up from none in the four before. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/intermesh","json_url":"https://junglewise.ai/threats/vendors/intermesh.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/intermesh","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":2,"all_time":10,"critical":1,"exploited":0,"last_7_days":6,"last_30_days":7,"last_90_days":7,"last_365_days":10},"latest":[{"cve":"CVE-2026-63653","cvss":5,"slug":"cve-2026-63653-group-office-is-an-enterprise-customer-relationship-management","title":"Group-Office server-side request forgery in Bookmark description","severity":"medium","exploited":false,"published_at":"2026-11-10T17:17:46.307+00:00","url":"https://junglewise.ai/threats/cve-2026-63653-group-office-is-an-enterprise-customer-relationship-management"},{"cve":"CVE-2026-63011","slug":"cve-2026-63011-group-office-is-an-enterprise-customer-relationship-management","title":"Group-Office template injection in Contact/labels JMAP endpoint","severity":"info","exploited":false,"published_at":"2026-11-10T17:17:45.98+00:00","url":"https://junglewise.ai/threats/cve-2026-63011-group-office-is-an-enterprise-customer-relationship-management"},{"cve":"CVE-2026-63010","slug":"cve-2026-63010-group-office-is-an-enterprise-customer-relationship-management","title":"Group-Office stored XSS in reminders via HTML/JavaScript injection","severity":"info","exploited":false,"published_at":"2026-11-10T17:17:45.8+00:00","url":"https://junglewise.ai/threats/cve-2026-63010-group-office-is-an-enterprise-customer-relationship-management"},{"cve":"CVE-2026-125390","cvss":6.5,"slug":"cve-2026-125390-group-office-before-6-8-181-25-0-116-and-26-0-58-contains-an","title":"Group-Office arbitrary local file read in FolderController","severity":"medium","exploited":false,"published_at":"2026-11-10T00:17:12.653+00:00","url":"https://junglewise.ai/threats/cve-2026-125390-group-office-before-6-8-181-25-0-116-and-26-0-58-contains-an"},{"cve":"CVE-2026-125389","cvss":6.1,"slug":"cve-2026-125389-intermesh-group-office-before-6-8-181-25-0-116-and-26-0-58","title":"Intermesh Group-Office stored XSS in email viewer","severity":"medium","exploited":false,"published_at":"2026-11-10T00:17:12.48+00:00","url":"https://junglewise.ai/threats/cve-2026-125389-intermesh-group-office-before-6-8-181-25-0-116-and-26-0-58"},{"cve":"CVE-2026-125388","cvss":6.5,"slug":"cve-2026-125388-intermesh-group-office-before-6-8-181-25-0-116-and-26-0-58","title":"Intermesh Group-Office missing authorization in form report download","severity":"medium","exploited":false,"published_at":"2026-11-10T00:17:12.32+00:00","url":"https://junglewise.ai/threats/cve-2026-125388-intermesh-group-office-before-6-8-181-25-0-116-and-26-0-58"},{"cve":"CVE-2018-25438","cvss":7.5,"slug":"cve-2018-25438-intermesh-group-office-3-3-0-before-3-5-5-contains-an","title":"Intermesh Group-Office path traversal in compress.php","severity":"high","exploited":false,"published_at":"2026-10-22T11:17:03.463+00:00","url":"https://junglewise.ai/threats/cve-2018-25438-intermesh-group-office-3-3-0-before-3-5-5-contains-an"},{"cve":"CVE-2026-45551","cvss":5.1,"slug":"cve-2026-45551-intermesh-group-office-stored-xss-and-privilege-escalation-via","title":"Intermesh Group-Office stored XSS and privilege escalation via cross-user setting write","severity":"info","exploited":false,"published_at":"2026-05-29T13:16:22.917+00:00","url":"https://junglewise.ai/threats/cve-2026-45551-intermesh-group-office-stored-xss-and-privilege-escalation-via"},{"cve":"CVE-2026-34838","cvss":9.9,"epss":0.0103,"slug":"cve-2026-34838-intermesh-group-office-insecure-deserialization-in","title":"Intermesh Group-Office insecure deserialization in AbstractSettingsCollection","severity":"critical","exploited":false,"published_at":"2026-04-02T20:16:28.15+00:00","url":"https://junglewise.ai/threats/cve-2026-34838-intermesh-group-office-insecure-deserialization-in"},{"cve":"CVE-2026-33755","cvss":8.8,"epss":0.0039,"slug":"cve-2026-33755-group-office-is-an-enterprise-customer-relationship-management","title":"Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.158, 25.0.92…","severity":"high","exploited":false,"published_at":"2026-03-27T15:16:57.527+00:00","url":"https://junglewise.ai/threats/cve-2026-33755-group-office-is-an-enterprise-customer-relationship-management"}],"vendor":{"hub":true,"name":"Intermesh","slug":"intermesh","homepage":"https://www.intermesh.nl/","description":"A software company specializing in groupware and CRM solutions, including Group-Office.","url":"https://junglewise.ai/threats/vendors/intermesh"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":6}],"most_severe":[{"cve":"CVE-2026-34838","cvss":9.9,"epss":0.0103,"slug":"cve-2026-34838-intermesh-group-office-insecure-deserialization-in","title":"Intermesh Group-Office insecure deserialization in AbstractSettingsCollection","severity":"critical","exploited":false,"published_at":"2026-04-02T20:16:28.15+00:00","url":"https://junglewise.ai/threats/cve-2026-34838-intermesh-group-office-insecure-deserialization-in"},{"cve":"CVE-2026-33755","cvss":8.8,"epss":0.0039,"slug":"cve-2026-33755-group-office-is-an-enterprise-customer-relationship-management","title":"Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.158, 25.0.92…","severity":"high","exploited":false,"published_at":"2026-03-27T15:16:57.527+00:00","url":"https://junglewise.ai/threats/cve-2026-33755-group-office-is-an-enterprise-customer-relationship-management"},{"cve":"CVE-2018-25438","cvss":7.5,"slug":"cve-2018-25438-intermesh-group-office-3-3-0-before-3-5-5-contains-an","title":"Intermesh Group-Office path traversal in compress.php","severity":"high","exploited":false,"published_at":"2026-10-22T11:17:03.463+00:00","url":"https://junglewise.ai/threats/cve-2018-25438-intermesh-group-office-3-3-0-before-3-5-5-contains-an"},{"cve":"CVE-2026-125390","cvss":6.5,"slug":"cve-2026-125390-group-office-before-6-8-181-25-0-116-and-26-0-58-contains-an","title":"Group-Office arbitrary local file read in FolderController","severity":"medium","exploited":false,"published_at":"2026-11-10T00:17:12.653+00:00","url":"https://junglewise.ai/threats/cve-2026-125390-group-office-before-6-8-181-25-0-116-and-26-0-58-contains-an"},{"cve":"CVE-2026-125388","cvss":6.5,"slug":"cve-2026-125388-intermesh-group-office-before-6-8-181-25-0-116-and-26-0-58","title":"Intermesh Group-Office missing authorization in form report download","severity":"medium","exploited":false,"published_at":"2026-11-10T00:17:12.32+00:00","url":"https://junglewise.ai/threats/cve-2026-125388-intermesh-group-office-before-6-8-181-25-0-116-and-26-0-58"},{"cve":"CVE-2026-125389","cvss":6.1,"slug":"cve-2026-125389-intermesh-group-office-before-6-8-181-25-0-116-and-26-0-58","title":"Intermesh Group-Office stored XSS in email viewer","severity":"medium","exploited":false,"published_at":"2026-11-10T00:17:12.48+00:00","url":"https://junglewise.ai/threats/cve-2026-125389-intermesh-group-office-before-6-8-181-25-0-116-and-26-0-58"},{"cve":"CVE-2026-63653","cvss":5,"slug":"cve-2026-63653-group-office-is-an-enterprise-customer-relationship-management","title":"Group-Office server-side request forgery in Bookmark description","severity":"medium","exploited":false,"published_at":"2026-11-10T17:17:46.307+00:00","url":"https://junglewise.ai/threats/cve-2026-63653-group-office-is-an-enterprise-customer-relationship-management"},{"cve":"CVE-2026-45551","cvss":5.1,"slug":"cve-2026-45551-intermesh-group-office-stored-xss-and-privilege-escalation-via","title":"Intermesh Group-Office stored XSS and privilege escalation via cross-user setting write","severity":"info","exploited":false,"published_at":"2026-05-29T13:16:22.917+00:00","url":"https://junglewise.ai/threats/cve-2026-45551-intermesh-group-office-stored-xss-and-privilege-escalation-via"},{"cve":"CVE-2026-63011","slug":"cve-2026-63011-group-office-is-an-enterprise-customer-relationship-management","title":"Group-Office template injection in Contact/labels JMAP endpoint","severity":"info","exploited":false,"published_at":"2026-11-10T17:17:45.98+00:00","url":"https://junglewise.ai/threats/cve-2026-63011-group-office-is-an-enterprise-customer-relationship-management"},{"cve":"CVE-2026-63010","slug":"cve-2026-63010-group-office-is-an-enterprise-customer-relationship-management","title":"Group-Office stored XSS in reminders via HTML/JavaScript injection","severity":"info","exploited":false,"published_at":"2026-11-10T17:17:45.8+00:00","url":"https://junglewise.ai/threats/cve-2026-63010-group-office-is-an-enterprise-customer-relationship-management"}],"generated_at":"2026-11-11T03:07:00.183524+00:00","technologies":[{"name":"Intermesh Group-Office","slug":"group-office","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/group-office"}]}