Warning: Cross-site Scripting vulnerabilities in Zimbra, Patch Immediately!

ID: f1e097c9-da2b-5443-9ee3-7565e486e49e

STIX ID: report--f1e097c9-da2b-5443-9ee3-7565e486e49e

Feed Name: Centre for Cybersecurity Belgium Advisories Feed

Threat Score

Date Published: 2026-09-28

Date Updated: 2026-10-13

...

Three critical stored cross-site scripting vulnerabilities (CVE-2026-93641, CVE-2026-93642, CVE-2026-93647) in Zimbra Collaboration Suite prior to 10.1.21 allow unauthenticated attackers to execute script in signed-in users' webmail sessions, potentially exposing mailbox contents and enabling account actions as the victim; each is scored CVSS 9.3 and fixed in ZCS 10.1.21 (released 2026-09-24).

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.