Zimbra vulnerabilities

Products

• Collaboration 50
• Collaboration Suite 22
• Collaboration Server 6
• Zimbra 5
• Collaboration Suite (zcs) 4
• Collaboration Server 2
• Collaboration Suite 2

Newest

• synacor zimbra collaboration suite, zimbra collaboration suite +1 more Zimbra Collaboration Suite Shared-File Mailbox Quota Accounting Error Enables Quota Exhaustion CVE-2026-115786 6.5 MediumOctober 23, 2026
• synacor zimbra collaboration suite, zimbra collaboration suite +1 more Zimbra Collaboration Suite Data Source Test SMTP Command Injection via Unsanitized Email Address CVE-2026-115785 4.3 MediumOctober 23, 2026
• zimbra collaboration suite Zimbra Collaboration Suite Local Privilege Escalation via Unrestricted zmunbound Sudo Configuration CVE-2026-93640 7.8 HighOctober 23, 2026
• zimbra collaboration suite Zimbra Collaboration Suite Local Privilege Escalation via Unrestricted Postfix Sudo Permissions CVE-2026-50057 7.8 HighOctober 23, 2026
• zimbra collaboration suite Zimbra Collaboration Suite Local Privilege Escalation via zmmailboxdmgr JVM Argument Injection CVE-2026-50056 7.8 HighOctober 23, 2026
• zimbra collaboration suite Zimbra Collaboration Suite Missing Authorization in ConfigureZimlet Enables Delegated Administrator Privilege Escalation CVE-2026-93639 8.7 HighOctober 23, 2026
• synacor zimbra collaboration suite, zimbra collaboration suite +1 more Zimbra Collaboration Suite Pre-Authentication Reflected Cross-Site Scripting via Login Page zrememberme Parameter CVE-2026-93638 6.1 MediumOctober 23, 2026
• synacor zimbra collaboration suite, zimbra collaboration suite +1 more Zimbra Collaboration Suite LDAP Filter Injection via Calendar Resource Attribute Name CVE-2026-93636 4.3 MediumOctober 23, 2026
• synacor zimbra collaboration suite, zimbra collaboration suite +1 more Zimbra Collaboration Suite Cross-Account Authorization Bypass via Forged Shared-File Records CVE-2026-93634 4.3 MediumOctober 23, 2026
• synacor zimbra collaboration suite, zimbra collaboration suite +1 more Zimbra Collaboration Suite Briefcase CSS Sanitization Bypass via Non-ASCII Stylesheet Characters CVE-2026-93633 5.4 MediumOctober 23, 2026
• synacor zimbra collaboration suite, zimbra collaboration suite +1 more Zimbra Collaboration Suite OAuth Extension Cross-Site Request Forgery Enables Account Linking CVE-2026-93631 7.1 HighOctober 23, 2026
• zimbra collaboration suite Zimbra Collaboration Suite Email HTML Sanitizer Bypass via Hostname Canonicalization CVE-2026-93630 4.3 MediumOctober 23, 2026
• zimbra collaboration suite Zimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar REQUEST Organizer Identity CVE-2026-93629 5.3 MediumOctober 23, 2026
• zimbra collaboration suite Zimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar REPLY Attendee Response CVE-2026-93628 5.3 MediumOctober 23, 2026
• zimbra collaboration suite Zimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar CANCEL/REQUEST Organizer CVE-2026-93627 5.3 MediumOctober 23, 2026
• synacor zimbra collaboration suite, zimbra collaboration suite +1 more Zimbra Collaboration Suite RestFilter Request Attribute Override via Unauthenticated URL Parameters CVE-2026-50053 8.7 HighOctober 23, 2026
• zimbra collaboration suite Zimbra Collaboration Suite Classic Web Client Reflected Cross-Site Scripting via Document Editor Packages Parameter CVE-2026-10632 8.7 HighOctober 23, 2026
• zimbra collaboration suite Zimbra Collaboration Suite GraphQL Batched Authentication Bypasses Pre-Auth Rate Limiting CVE-2026-93637 3.7 LowOctober 14, 2026
• zimbra collaboration suite Zimbra Collaboration Suite LDAP Filter Injection via Unescaped computeDn() Template Substitution CVE-2026-93635 5.3 MediumOctober 14, 2026
• zimbra collaboration suite Zimbra Collaboration Suite Sieve Notify Filter Action Bypasses Mail Forwarding Restriction via Variable Expansion CVE-2026-50055 Public exploit 6.5 MediumOctober 8, 2026
• zimbra collaboration suite Zimbra Collaboration Suite GrantRightsRequest SOAP Handler Allows Self-Granting of Undocumented loginAs Mailbox Delegation Right CVE-2026-50054 7.1 HighOctober 8, 2026
• zimbra collaboration suite Zimbra Collaboration Suite EWS Extension Authorization Bypass via Crafted Composite Folder/Item Identifier CVE-2026-10631 6.5 MediumOctober 8, 2026
• synacor zimbra collaboration suite (zcs), zimbra collaboration suite (zcs) +1 more Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Crafted Calendar COUNTER Message From Address CVE-2026-93647 9.3 CriticalSeptember 25, 2026
• synacor zimbra collaboration suite (zcs), zimbra collaboration suite (zcs) +1 more Zimbra Collaboration Suite OnlyOffice Integration Path Traversal Leading to Remote Code Execution via Unauthenticated /downloadas Request CVE-2026-93643 9.8 CriticalSeptember 25, 2026
• synacor zimbra collaboration suite (zcs), zimbra collaboration suite (zcs) +1 more Zimbra Collaboration Suite Modern Web Client Stored Cross-Site Scripting via Forged Share Invitation CVE-2026-93642 9.3 CriticalSeptember 25, 2026
• synacor zimbra collaboration suite (zcs), zimbra collaboration suite (zcs) +1 more Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Forged Share Invitation CVE-2026-93641 9.3 CriticalSeptember 25, 2026
• zimbra collaboration, synacor zimbra collaboration suite +1 more In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability... CVE-2026-73576 6.3 MediumAugust 13, 2026
• zimbra collaboration, synacor zimbra collaboration suite +1 more In Zimbra Collaboration (ZCS) before 10.1.17, a Cross-Site Request Forgery (CSRF) vulnerability... CVE-2026-73575 3.1 LowAugust 13, 2026
• zimbra collaboration, synacor zimbra collaboration suite +1 more In Zimbra Collaboration before 10.1.17, a local file inclusion (LFI) vulnerability exists in the... CVE-2026-73574 3.1 LowAugust 13, 2026
• zimbra collaboration, synacor zimbra collaboration suite +1 more In Zimbra Collaboration (ZCS) before 10.1.17, a path traversal vulnerability exists in the Zimbra... CVE-2026-73573 3.1 LowAugust 13, 2026
• zimbra collaboration, synacor zimbra collaboration suite +1 more In Zimbra Collaboration (ZCS) before 10.1.17, a stored cross-site scripting (XSS) vulnerability... CVE-2026-73572 6.1 MediumAugust 13, 2026
• zimbra collaboration, synacor zimbra collaboration suite +1 more An authorization bypass vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.17 due to... CVE-2026-73571 3.1 LowAugust 13, 2026
• zimbra collaboration, synacor zimbra collaboration suite (zcs), zimbra collaboration suite +2 more A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when... CVE-2026-73570 In KEVPublic exploit EPSS 71.7% 8.9 HighAugust 13, 2026
• zimbra collaboration, synacor zimbra collaboration suite (zcs), zimbra collaboration suite +2 more Zimbra Collaboration (ZCS) 10 before 10.0.18 and 10.1 before 10.1.13 allows Classic UI stored XSS... CVE-2025-66376 In KEV EPSS 20.2% 7.2 HighJanuary 5, 2026
• zimbra collaboration An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A hardcoded Flickr API key... CVE-2025-67809 4.7 MediumDecember 15, 2025
• zimbra collaboration Zimbra Collaboration (ZCS) before 10.1.12 allows SSRF because of the configuration of the chat... CVE-2025-62763 5.0 MediumOctober 21, 2025
• zimbra collaboration An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A Cross-Site Scripting (XSS)... CVE-2024-45515 6.1 MediumJuly 30, 2025
• zimbra collaboration An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A Reflected Cross... CVE-2025-27914 5.4 MediumMarch 12, 2025
• zimbra Zimbra GraphQL Cross-Site Request Forgery Information Disclosure Vulnerability CVE-2024-9665 6.5 MediumNovember 22, 2024
• zimbra collaboration An issue was discovered in Zimbra Collaboration (ZCS) 10.1.x before 10.1.1, 10.0.x before 10.0.9,... CVE-2024-45518 EPSS 20.7% 8.8 HighOctober 22, 2024
• zimbra collaboration An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. The vulnerability occurs due... CVE-2024-33536 5.4 MediumAugust 12, 2024
• zimbra collaboration An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. The vulnerability involves... CVE-2024-33535 7.5 HighAugust 12, 2024
• zimbra collaboration An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0, issue 1 of 2. A reflected... CVE-2024-33533 5.4 MediumAugust 12, 2024
• zimbra collaboration, synacor zimbra collaboration suite (zcs) +1 more An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS)... CVE-2024-27443 In KEV EPSS 24.6% 6.1 MediumAugust 12, 2024
• zimbra collaboration An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. The zmmailboxdmgr binary, a... CVE-2024-27442 7.8 HighAugust 12, 2024
• zimbra zm-admin-ajax Zimbra zm-admin-ajax Form Textbox Field Error XFormItem.js XFormItem.prototype.setError cross site scripting CVE-2017-20191 3.5 LowMarch 31, 2024
• zimbra collaboration, synacor zimbra collaboration suite +1 more Zimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows DOM-based JavaScript injection in the... CVE-2023-50808 6.1 MediumFebruary 13, 2024
• zimbra collaboration An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0. XSS, with resultant... CVE-2023-48432 6.1 MediumFebruary 13, 2024
• zimbra collaboration An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0. An attacker can send... CVE-2023-45207 6.1 MediumFebruary 13, 2024
• zimbra collaboration An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0. Through the help... CVE-2023-45206 6.1 MediumFebruary 13, 2024
• Show olderLoading…