Tag: CVE-2025-27915

Critical CVEs

Critical Zimbra Classic Web Client XSS Flaw Enables Code Execution via Crafted Emails

Zimbra has disclosed a critical stored cross-site scripting (XSS) vulnerability in its Classic Web Client that could allow attackers to execute arbitrary…

arbitrary code execution Classic Web Client cross-site scripting CVE-2023-37580

July 11, 2026

Critical CVEs

CVE-2025-27915: Zimbra Classic Web Client Stored XSS Vulnerability

A stored cross-site scripting (XSS) vulnerability in Zimbra's Classic Web Client (CVSS 5.4) that was allegedly exploited as a zero-day against the…

Brazilian military Classic Web Client CVE-2025-27915 stored XSS

July 11, 2026