CVE-2026-50055: Zimbra Mail Forwarding Restriction Bypass
A vulnerability in Zimbra that allows authenticated users to bypass mail forwarding restrictions and exfiltrate email. Discovered by Rapid7 researcher Jonah Burgess.
Tag: Zimbra
Zimbra 10.1.20: Latest Security Update
Zimbra 10.1.20 is the latest version that patches nine security vulnerabilities including critical SNMP command injection and multiple XSS flaws.
Weekly Cybersecurity Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More
This week's cybersecurity landscape is marked by a series of critical threats and vulnerabilities. Progress has urged ShareFile customers to shut down…
CVE-2023-37580: Zimbra XSS Vulnerability Exploited by Threat Actors
A cross-site scripting vulnerability in Zimbra that was exploited by threat actors. Part of a series of XSS flaws targeting Zimbra's web…
CVE-2024-27443: Zimbra XSS Vulnerability Exploited by Threat Actors
A cross-site scripting vulnerability in Zimbra that was exploited by threat actors. Part of a series of XSS flaws targeting Zimbra's web…
Zimbra Classic Web Client: XSS Vulnerabilities Patched
The Classic Web Client in Zimbra had four XSS vulnerabilities patched, including stored XSS via attachment filenames and crafted fields.
Critical Zimbra Classic Web Client XSS Flaw Enables Code Execution via Crafted Emails
Zimbra has disclosed a critical stored cross-site scripting (XSS) vulnerability in its Classic Web Client that could allow attackers to execute arbitrary…
CVE-2025-27915: Zimbra Classic Web Client Stored XSS Vulnerability
A stored cross-site scripting (XSS) vulnerability in Zimbra's Classic Web Client (CVSS 5.4) that was allegedly exploited as a zero-day against the…
StrikeShark Campaign Uses Novel SharkLoader Malware to Deploy Cobalt Strike Beacon
A newly identified cyber attack campaign, tracked as StrikeShark by Kaspersky, is deploying a previously undocumented malware family called SharkLoader to deliver…
Zimbra: Email Collaboration Software Vendor
Zimbra provides the Zimbra Collaboration Suite (ZCS), an email and collaboration platform. The company patched CVE-2026-73570 in version 10.1.20 and has been…