CVE-2026-25134 - Remote Code Execution in GroupOffice

RCE via arbitrary file upload - CVSS 9.4

CVE-2026-25511 - SSRF and File Read in GroupOffice

Full SSRF via the WOPI service discovery feature - CVSS 8.2