CVE-2026-93642 - zimbra collaboration suite (zcs)
A fake share invitation can be sent to a Zimbra user who is logged in. When the user clicks the invitation, hidden code runs and the attacker can view the user's email…

Too many irrelevant or confusing CVEs? Use stackflag.com

#zimbra #CVE #infosec

CVE-2026-93641 - zimbra collaboration suite (zcs)
A malicious sender can create a fake share invitation that, when a logged‑in Zimbra Classic user clicks "Accept Share," runs hidden code in the user's browser. This…

Too many irrelevant or confusing CVEs? Use stackflag.com

#zimbra #CVE #infosec

CVE-2026-93647 - zimbra collaboration suite (zcs)
Anyone can send a specially crafted calendar invitation that contains hidden code in the From address. When a user opens that invitation in the Zimbra Classic web…

Too many irrelevant or confusing CVEs? Use stackflag.com

#zimbra #CVE #infosec

CVE-2026-93643 - zimbra collaboration suite (zcs)
If Zimbra’s OnlyOffice document feature is enabled, a remote attacker who can view a public document can trick the system into writing files to any location and then…

Too many irrelevant or confusing CVEs? Use stackflag.com

#zimbra #CVE #infosec

⛏️ Aprende a descubrir cuando un actor malicioso explota tu #Zimbra para minar criptomonedas en este nuevo artículo técnico del CSIRT Nacional, de la Agencia Nacional de Ciberseguridad #ANCI.

Léelo antes que nadie, aquí: csirt.gob.cl/articulo/zim...