CVE-2026-40727

HighCVSS 7.7

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 16/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.34%

26th percentile - higher than 26% of all known CVEs

Summary

In Groundhogg versions <= 4.4, there is a vulnerability that allows sales representatives to delete arbitrary files.

Risk Assessment

This vulnerability may lead to unauthorized deletion of critical data, jeopardizing system integrity and potentially resulting in data loss.

Recommendation

It is recommended to upgrade to the latest version of Groundhogg to mitigate this vulnerability and to restrict the permissions of sales representatives.

Original NVD description (English source)

Sales Representative Arbitrary File Deletion in Groundhogg <= 4.4 versions.