agentprime: zimbra-collaboration-suiteEvery new CVE for zimbra-collaboration-suite.https://agentprime.io/CVE-2026-115786: Zimbra Collaboration Suite Shared-File Mailbox Quota Accounting Error Enables Quota Exhaustionhttps://agentprime.io/advisories/CVE-2026-115786/https://agentprime.io/advisories/CVE-2026-115786/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:53:33 GMTCVECVE-2026-115785: Zimbra Collaboration Suite Data Source Test SMTP Command Injection via Unsanitized Email Addresshttps://agentprime.io/advisories/CVE-2026-115785/https://agentprime.io/advisories/CVE-2026-115785/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:50:33 GMTCVECVE-2026-93640: Zimbra Collaboration Suite Local Privilege Escalation via Unrestricted zmunbound Sudo Configurationhttps://agentprime.io/advisories/CVE-2026-93640/https://agentprime.io/advisories/CVE-2026-93640/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:34:41 GMTCVECVE-2026-50057: Zimbra Collaboration Suite Local Privilege Escalation via Unrestricted Postfix Sudo Permissionshttps://agentprime.io/advisories/CVE-2026-50057/https://agentprime.io/advisories/CVE-2026-50057/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:33:29 GMTCVECVE-2026-50056: Zimbra Collaboration Suite Local Privilege Escalation via zmmailboxdmgr JVM Argument Injectionhttps://agentprime.io/advisories/CVE-2026-50056/https://agentprime.io/advisories/CVE-2026-50056/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:30:43 GMTCVECVE-2026-93639: Zimbra Collaboration Suite Missing Authorization in ConfigureZimlet Enables Delegated Administrator Privilege Escalationhttps://agentprime.io/advisories/CVE-2026-93639/https://agentprime.io/advisories/CVE-2026-93639/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:29:25 GMTCVECVE-2026-93638: Zimbra Collaboration Suite Pre-Authentication Reflected Cross-Site Scripting via Login Page zrememberme Parameterhttps://agentprime.io/advisories/CVE-2026-93638/https://agentprime.io/advisories/CVE-2026-93638/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:28:03 GMTCVECVE-2026-93636: Zimbra Collaboration Suite LDAP Filter Injection via Calendar Resource Attribute Namehttps://agentprime.io/advisories/CVE-2026-93636/https://agentprime.io/advisories/CVE-2026-93636/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:27:14 GMTCVECVE-2026-93634: Zimbra Collaboration Suite Cross-Account Authorization Bypass via Forged Shared-File Recordshttps://agentprime.io/advisories/CVE-2026-93634/https://agentprime.io/advisories/CVE-2026-93634/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:26:11 GMTCVECVE-2026-93633: Zimbra Collaboration Suite Briefcase CSS Sanitization Bypass via Non-ASCII Stylesheet Charactershttps://agentprime.io/advisories/CVE-2026-93633/https://agentprime.io/advisories/CVE-2026-93633/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:25:21 GMTCVECVE-2026-93631: Zimbra Collaboration Suite OAuth Extension Cross-Site Request Forgery Enables Account Linkinghttps://agentprime.io/advisories/CVE-2026-93631/https://agentprime.io/advisories/CVE-2026-93631/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:23:34 GMTCVECVE-2026-93630: Zimbra Collaboration Suite Email HTML Sanitizer Bypass via Hostname Canonicalizationhttps://agentprime.io/advisories/CVE-2026-93630/https://agentprime.io/advisories/CVE-2026-93630/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:21:39 GMTCVECVE-2026-93629: Zimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar REQUEST Organizer Identityhttps://agentprime.io/advisories/CVE-2026-93629/https://agentprime.io/advisories/CVE-2026-93629/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:19:26 GMTCVECVE-2026-93628: Zimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar REPLY Attendee Responsehttps://agentprime.io/advisories/CVE-2026-93628/https://agentprime.io/advisories/CVE-2026-93628/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:18:16 GMTCVECVE-2026-93627: Zimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar CANCEL/REQUEST Organizerhttps://agentprime.io/advisories/CVE-2026-93627/https://agentprime.io/advisories/CVE-2026-93627/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:17:00 GMTCVECVE-2026-50053: Zimbra Collaboration Suite RestFilter Request Attribute Override via Unauthenticated URL Parametershttps://agentprime.io/advisories/CVE-2026-50053/https://agentprime.io/advisories/CVE-2026-50053/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:15:44 GMTCVECVE-2026-10632: Zimbra Collaboration Suite Classic Web Client Reflected Cross-Site Scripting via Document Editor Packages Parameterhttps://agentprime.io/advisories/CVE-2026-10632/https://agentprime.io/advisories/CVE-2026-10632/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:14:04 GMTCVECVE-2026-93637: Zimbra Collaboration Suite GraphQL Batched Authentication Bypasses Pre-Auth Rate Limitinghttps://agentprime.io/advisories/CVE-2026-93637/https://agentprime.io/advisories/CVE-2026-93637/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 16:25:23 GMTCVECVE-2026-93635: Zimbra Collaboration Suite LDAP Filter Injection via Unescaped computeDn() Template Substitutionhttps://agentprime.io/advisories/CVE-2026-93635/https://agentprime.io/advisories/CVE-2026-93635/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 16:24:33 GMTCVECVE-2026-50055: Zimbra Collaboration Suite Sieve Notify Filter Action Bypasses Mail Forwarding Restriction via Variable Expansionhttps://agentprime.io/advisories/CVE-2026-50055/https://agentprime.io/advisories/CVE-2026-50055/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 16:25:42 GMTCVECVE-2026-50054: Zimbra Collaboration Suite GrantRightsRequest SOAP Handler Allows Self-Granting of Undocumented loginAs Mailbox Delegation Righthttps://agentprime.io/advisories/CVE-2026-50054/https://agentprime.io/advisories/CVE-2026-50054/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 16:25:37 GMTCVECVE-2026-10631: Zimbra Collaboration Suite EWS Extension Authorization Bypass via Crafted Composite Folder/Item Identifierhttps://agentprime.io/advisories/CVE-2026-10631/https://agentprime.io/advisories/CVE-2026-10631/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 16:25:27 GMTCVE