Skip to contentZimbra Collaboration Suite vulnerabilities
- synacor zimbra collaboration suite, zimbra collaboration suite +1 moreZimbra Collaboration Suite Shared-File Mailbox Quota Accounting Error Enables Quota ExhaustionCVE-2026-1157866.5 Medium
- synacor zimbra collaboration suite, zimbra collaboration suite +1 moreZimbra Collaboration Suite Data Source Test SMTP Command Injection via Unsanitized Email AddressCVE-2026-1157854.3 Medium
- zimbra collaboration suiteZimbra Collaboration Suite Local Privilege Escalation via Unrestricted zmunbound Sudo ConfigurationCVE-2026-936407.8 High
- zimbra collaboration suiteZimbra Collaboration Suite Local Privilege Escalation via Unrestricted Postfix Sudo PermissionsCVE-2026-500577.8 High
- zimbra collaboration suiteZimbra Collaboration Suite Local Privilege Escalation via zmmailboxdmgr JVM Argument InjectionCVE-2026-500567.8 High
- zimbra collaboration suiteZimbra Collaboration Suite Missing Authorization in ConfigureZimlet Enables Delegated Administrator Privilege EscalationCVE-2026-936398.7 High
- synacor zimbra collaboration suite, zimbra collaboration suite +1 moreZimbra Collaboration Suite Pre-Authentication Reflected Cross-Site Scripting via Login Page zrememberme ParameterCVE-2026-936386.1 Medium
- synacor zimbra collaboration suite, zimbra collaboration suite +1 moreZimbra Collaboration Suite LDAP Filter Injection via Calendar Resource Attribute NameCVE-2026-936364.3 Medium
- synacor zimbra collaboration suite, zimbra collaboration suite +1 moreZimbra Collaboration Suite Cross-Account Authorization Bypass via Forged Shared-File RecordsCVE-2026-936344.3 Medium
- synacor zimbra collaboration suite, zimbra collaboration suite +1 moreZimbra Collaboration Suite Briefcase CSS Sanitization Bypass via Non-ASCII Stylesheet CharactersCVE-2026-936335.4 Medium
- synacor zimbra collaboration suite, zimbra collaboration suite +1 moreZimbra Collaboration Suite OAuth Extension Cross-Site Request Forgery Enables Account LinkingCVE-2026-936317.1 High
- zimbra collaboration suiteZimbra Collaboration Suite Email HTML Sanitizer Bypass via Hostname CanonicalizationCVE-2026-936304.3 Medium
- zimbra collaboration suiteZimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar REQUEST Organizer IdentityCVE-2026-936295.3 Medium
- zimbra collaboration suiteZimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar REPLY Attendee ResponseCVE-2026-936285.3 Medium
- zimbra collaboration suiteZimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar CANCEL/REQUEST OrganizerCVE-2026-936275.3 Medium
- synacor zimbra collaboration suite, zimbra collaboration suite +1 moreZimbra Collaboration Suite RestFilter Request Attribute Override via Unauthenticated URL ParametersCVE-2026-500538.7 High
- zimbra collaboration suiteZimbra Collaboration Suite Classic Web Client Reflected Cross-Site Scripting via Document Editor Packages ParameterCVE-2026-106328.7 High
- zimbra collaboration suiteZimbra Collaboration Suite GraphQL Batched Authentication Bypasses Pre-Auth Rate LimitingCVE-2026-936373.7 Low
- zimbra collaboration suiteZimbra Collaboration Suite LDAP Filter Injection via Unescaped computeDn() Template SubstitutionCVE-2026-936355.3 Medium
- zimbra collaboration suiteZimbra Collaboration Suite Sieve Notify Filter Action Bypasses Mail Forwarding Restriction via Variable ExpansionCVE-2026-50055Public exploit6.5 Medium
- zimbra collaboration suiteZimbra Collaboration Suite GrantRightsRequest SOAP Handler Allows Self-Granting of Undocumented loginAs Mailbox Delegation RightCVE-2026-500547.1 High
- zimbra collaboration suiteZimbra Collaboration Suite EWS Extension Authorization Bypass via Crafted Composite Folder/Item IdentifierCVE-2026-106316.5 Medium
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite (zcs) +1 moreZimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Crafted Calendar COUNTER Message From AddressCVE-2026-936479.3 Critical
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite (zcs) +1 moreZimbra Collaboration Suite OnlyOffice Integration Path Traversal Leading to Remote Code Execution via Unauthenticated /downloadas RequestCVE-2026-936439.8 Critical
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite (zcs) +1 moreZimbra Collaboration Suite Modern Web Client Stored Cross-Site Scripting via Forged Share InvitationCVE-2026-936429.3 Critical
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite (zcs) +1 moreZimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Forged Share InvitationCVE-2026-936419.3 Critical