A stored cross-site scripting (XSS) vulnerability in Zimbra's Classic Web Client (CVSS 5.4) that was allegedly exploited as a zero-day against the Brazilian military in October 2025. Zimbra found no evidence of active exploitation.
A stored cross-site scripting (XSS) vulnerability in Zimbra's Classic Web Client (CVSS 5.4) that was allegedly exploited as a zero-day against the Brazilian military in October 2025. Zimbra found no evidence of active exploitation.