Product by Zimbra

    Zimbra

    34 known vulnerabilities in Zimbra (Zimbra), 0 of them actively exploited (CISA KEV).

    Key figures

    34

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Zimbra (Zimbra)
    CriticalCVE-2026-93643

    Zimbra Collaboration Suite (ZCS): Path Traversal

    also in 1 other product

    		9.8
    HighCVE-2026-93639

    Zimbra Collaboration Suite: Missing Authorization

    also in 1 other product

    		8.7
    CriticalCVE-2026-93641

    Zimbra Collaboration Suite (ZCS): Cross-site Scripting

    also in 1 other product

    		9.3
    HighCVE-2026-10632

    Zimbra Collaboration Suite: Cross-site Scripting

    also in 1 other product

    		8.7
    CriticalCVE-2026-93647

    Zimbra Collaboration Suite (ZCS): Cross-site Scripting

    also in 1 other product

    		9.3
    CriticalCVE-2026-93642

    Zimbra Collaboration Suite Modern Web Client Stored Cross-Site Scripting via Forged Share Invitation

    also in 1 other product

    		9.3
    HighCVE-2026-50056

    Zimbra Collaboration Suite Local Privilege Escalation via zmmailboxdmgr JVM Argument Injection

    also in 1 other product

    		7.8
    MediumCVE-2026-115785

    Zimbra Collaboration Suite Data Source Test SMTP Command Injection via Unsanitized Email Address

    also in 2 other products

    		4.3
    MediumCVE-2026-66911

    Stored Cross-Site Scripting in Zimbra

    		—
    HighCVE-2026-50057

    Zimbra Collaboration Suite Local Privilege Escalation via Unrestricted Postfix Sudo Permissions

    also in 1 other product

    		7.8
    MediumCVE-2026-115786

    Zimbra Collaboration Suite Shared-File Mailbox Quota Accounting Error Enables Quota Exhaustion

    also in 2 other products

    		6.5
    MediumCVE-2026-50055

    Zimbra Collaboration Suite: Incorrect Authorization

    also in 1 other product

    		6.5
    MediumCVE-2026-66912

    Stored Cross-Site Scripting in Zimbra

    		—
    HighCVE-2026-93640

    Zimbra Collaboration Suite Local Privilege Escalation via Unrestricted zmunbound Sudo Configuration

    also in 1 other product

    		7.8
    MediumCVE-2026-10631

    Zimbra Collaboration Suite: Authorization Bypass Through User-Controlled Key

    also in 1 other product

    		6.5
    HighCVE-2026-93631

    Zimbra Collaboration Suite OAuth Extension Cross-Site Request Forgery Enables Account Linking

    also in 2 other products

    		7.1
    HighCVE-2026-50054

    Zimbra Collaboration Suite: Improper Privilege Management

    also in 1 other product

    		7.1
    MediumCVE-2026-93638

    Zimbra Collaboration Suite: Cross-site Scripting

    also in 2 other products

    		6.1
    HighCVE-2026-50053

    Zimbra Collaboration Suite RestFilter Request Attribute Override via Unauthenticated URL Parameters

    also in 2 other products

    		5.4
    MediumCVE-2026-73576

    Zimbra Collaboration: Use of Predictable Algorithm in Random Number Generator

    also in 2 other products

    		6.3
    MediumCVE-2026-93629

    Zimbra Collaboration Suite: Authentication Bypass by Spoofing

    also in 1 other product

    		5.3
    MediumCVE-2026-93628

    Zimbra Collaboration Suite: Authentication Bypass by Spoofing

    also in 1 other product

    		5.3
    MediumCVE-2026-93627

    Zimbra Collaboration Suite: Authentication Bypass by Spoofing

    also in 1 other product

    		5.3
    MediumCVE-2026-93633

    Zimbra Collaboration Suite Briefcase CSS Sanitization Bypass via Non-ASCII Stylesheet Characters

    also in 2 other products

    		5.4
    MediumCVE-2026-93635

    Zimbra Collaboration Suite LDAP Filter Injection via Unescaped computeDn() Template Substitution

    also in 1 other product

    		5.3

    All vulnerabilities in search

    News

    All products by Zimbra