Advisories · Technology

Zimbra Collaboration.

Every CVE that names Zimbra Collaboration among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-73576 CVE record

CVSS 6.3 Medium

Zimbra Collaboration: In Zimbra Collaboration (ZCS) before 10.1.17…
- Zimbra Collaboration
- CWE-1241
Not analysed yet 13 Aug 2026
CVE-2026-73575 CVE record

CVSS 3.1 Low

Cross-site request forgery in Zimbra Collaboration
- Zimbra Collaboration
- Cross-site request forgery (CSRF)
Not analysed yet 13 Aug 2026
CVE-2026-73574 CVE record

CVSS 3.1 Low

Zimbra Collaboration: In Zimbra Collaboration before 10.1.17…
- Zimbra Collaboration
- CWE-669
Not analysed yet 13 Aug 2026
CVE-2026-73573 CVE record

CVSS 3.1 Low

Path traversal in Zimbra Collaboration
- Zimbra Collaboration
- Path traversal
Not analysed yet 13 Aug 2026
CVE-2026-73572 CVE record

CVSS 6.1 Medium

Cross-site scripting in Zimbra Collaboration
- Zimbra Collaboration
- Cross-site scripting (XSS)
Not analysed yet 13 Aug 2026
CVE-2026-73571 CVE record

CVSS 3.1 Low

Incorrect authorization in Zimbra Collaboration
- Zimbra Collaboration
- Broken access control
Not analysed yet 13 Aug 2026
CVE-2026-73570 CVE record

CVSS 8.9 HighCritical · KEV, CVSS 7+ and EPSSKEV

OS command injection in Zimbra Collaboration
- Zimbra Collaboration
- Command injection
Not analysed yet 13 Aug 2026
CVE-2025-66376 CVE record

CVSS 7.2 HighCritical · KEV, CVSS 7+ and EPSSKEV

Cross-site scripting in Zimbra Collaboration
- Zimbra Collaboration
- Cross-site scripting (XSS)
Not analysed yet 5 Jan 2026
CVE-2025-62763 CVE record

CVSS 5.0 Medium

Server-side request forgery in Zimbra Collaboration
- Zimbra Collaboration
- Server-side request forgery (SSRF)
Not analysed yet 21 Oct 2025