Vulnerabilities in Zimbra Collaboration software
During its own research, CERT Polska has found 2 XSS vulnerabilities (CVE-2026-66911 and CVE-2026-66912) in Zimbra Collaboration software.
EPSS 0.01 CVE-2026-66911 CVE-2026-66912 Zimbra PL
Výsledky hledání
· zachyceno
SPOJENO PŘES CVE How CVE-2026-73570 turns a Zimbra log file into remote code execution
When we are building detections for various threats, we regularly run the exploits on representative systems to help us build high-quality rules. The Common Vulnerabilities and Exposures (CVE) entry CVE-2026-73570 for Zimbra is no exception. Zimbra is a widely used enterprise email and collaboration software platform, known for its SMTP platform, among other services. SMTP plays a critical role in the infrastructure of many organizations by providing email services that often include either…
KEV ✓ EPSS 0.72 CVE-2026-73570 Zimbra Synacor veřejná správa US IT HU
Risolte vulnerabilità in Zimbra Collaboration Suite
Rilasciati aggiornamenti di sicurezza per risolvere diverse vulnerabilità, di cui con 4 con gravità “critica”, in Zimbra Collaboration Suite (ZCS), nota piattaforma di collaborazione e-mail sviluppata da Synacor.
EPSS 0.01 CVE-2026-93641 CVE-2026-93642 CVE-2026-93643 CVE-2026-93647 Synacor Zimbra IT
· zachyceno
Critical vulnerabilities in Zimbra Collaboration Suite
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-93642, CVE-2026-93643, CVE-2026-93647, Summary: CVE-2026-93642 (CVSS: 9.3): An unauthenticated sender can forge a share notification that triggers stored XSS when a signed-in Zimbra Modern recipient clicks Accept Share, allowing the attacker to access mailbox data and act as the victim. CVE-2026-93643 (CVSS: 9.8): When OnlyOffice/Document Editing is available, an unauthenticated remote…
EPSS 0.01 CVSS 9.8 CVE-2026-93642 CVE-2026-93643 CVE-2026-93647 Zimbra FI
Zimbra security advisory (AV26-964)
Serial Number: AV26-964Date: September 25, 2026 As of September 25, 2026, Zimbra is affected by vulnerabilities in the following product: Zimbra Collaboration Suite (ZCS) (Daffodil) Prior to 10.1.21 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. What’s New in Zimbra 10.1.21 (Daffodil) Zimbra Blog - All Things Zimbra
Zimbra CA
When Business Email Compromise Starts Rewriting Reality
Business Email Compromise (BEC) operates on a familiar playbook. Threat actors breach a mailbox, silently monitor operations, map approval chains, and ultimately exploit that access to divert funds or exfiltrate sensitive assets.This dynamic is central to our analysis as we kick off a series around Rapid7's collaborative research with Zimbra; upcoming installments will explore technical details and broader findings based within the Zimbra Collaboration Suite. Our investigation disrupted the…
KEV ✓ · ransomware EPSS 1.00 CVE-2022-27925 CVE-2022-37042 CVE-2023-37580 CVE-2024-45519 CVE-2025-27915 CVE-2026-73570 Zimbra US
ALERTĂ: Vulnerabilitate exploatată activ în Zimbra Collaboration Suite (ZCS)
CONTEXT La nivelul Directoratului Național de Securitate Cibernetică (DNSC) au fost observate ten...
Zimbra RO
NCSC-2026-0324 [1.00] [M/H] Kwetsbaarheid verholpen in Zimbra Collaboration Suite
Zimbra heeft een kwetsbaarheid verholpen in Zimbra Collaboration Suite. De kwetsbaarheid bevindt zich in Zimbra Collaboration Suite, versie voor 10.1.20. Ongeauthenticeerde aanvallers kunnen via speciaal opgemaakte SMTP-verzoeken OS-commando's uitvoeren. Dit vereist dat het zimbra-snmp pakket geïnstalleerd is en SNMP-notificaties zijn ingeschakeld.
Zimbra NL
Zimbra security advisory (AV26-816)
Serial number: AV26-816Date: August 14, 2026 As of August 13, 2026, Zimbra is affected by vulnerabilities in the following product: Collaboration - Prior to 10.1.20 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Zimbra Security Advisories - Zimbra: Tech Center Zimbra Responsible Disclosure Policy - Zimbra: Tech Center Zimbra: Blog - All Things Zimbra
Zimbra CA
Risolte vulnerabilità su Zimbra Collaboration
Rilasciati aggiornamenti di sicurezza per risolvere diverse vulnerabilità, di cui due con gravità “alta”, in Zimbra Collaboration, nota piattaforma di collaborazione e-mail sviluppata da Synacor Inc. Tali vulnerabilità, qualora sfruttate, potrebbero consentire a utenti malintenzionati remoti di eseguire codice arbitrario sui sistemi interessati.
KEV ✓ EPSS 0.72 CVE-2026-50054 CVE-2026-73570 Synacor Zimbra IT
27th July – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 27th July, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Nichirei, a Japan-based frozen-food supplier and logistics company, has experienced a ransomware attack that disrupted shipping operations and affected approximately 5,000 customers. KFC Japan warned of possible shortages. Nichirei confirmed personal data theft, while the RansomHouse group claimed responsibility and published a subset of the stolen…
KEV ✓ EPSS 0.20 CVE-2025-66376 CVE-2026-16232 CVE-2026-50522 Check Point Oracle Microsoft Zimbra energetika vodárenství doprava veřejná správa IL
Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes
Zimbra US
Russian Global Webmail Espionage
Unit 42 details a Russian cyberespionage campaign targeting Zimbra webmail servers using JavaScript injection to steal credentials. The post Russian Global Webmail Espionage appeared first on Unit 42.
Zimbra US