Vulnerabilities in Zimbra Collaboration software
During its own research, CERT Polska has found 2 XSS vulnerabilities (CVE-2026-66911 and CVE-2026-66912) in Zimbra Collaboration software.
EPSS 0.01 CVE-2026-66911 CVE-2026-66912 Zimbra PL
Výsledky hledání
· zachyceno
SPOJENO PŘES CVE How CVE-2026-73570 turns a Zimbra log file into remote code execution
When we are building detections for various threats, we regularly run the exploits on representative systems to help us build high-quality rules. The Common Vulnerabilities and Exposures (CVE) entry CVE-2026-73570 for Zimbra is no exception. Zimbra is a widely used enterprise email and collaboration software platform, known for its SMTP platform, among other services. SMTP plays a critical role in the infrastructure of many organizations by providing email services that often include either…
KEV ✓ EPSS 0.77 CVE-2026-73570 Zimbra Synacor veřejná správa US IT HU
When Business Email Compromise Starts Rewriting Reality
Business Email Compromise (BEC) operates on a familiar playbook. Threat actors breach a mailbox, silently monitor operations, map approval chains, and ultimately exploit that access to divert funds or exfiltrate sensitive assets.This dynamic is central to our analysis as we kick off a series around Rapid7's collaborative research with Zimbra; upcoming installments will explore technical details and broader findings based within the Zimbra Collaboration Suite. Our investigation disrupted the…
KEV ✓ · ransomware EPSS 1.00 CVE-2022-27925 CVE-2022-37042 CVE-2023-37580 CVE-2024-45519 CVE-2025-27915 CVE-2026-73570 Zimbra US