Z
Vendor security profile1 actively exploited CVEs
Zimbra
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs14
Critical4
CISA KEV1
Public exploit1
Patch rate%0
Avg. CVSS6.5
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
7
4
3
CVE KEV
CVE severity distribution
14toplam CVE
Critical4 (29%)
High2 (14%)
Medium4 (29%)
Low4 (29%)
Patch and exploitation view
%0
Verified patch
%7
CISA KEV
%7
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
14Unknown
Latest vulnerabilities
6.5
CVE-2026-50055
Zimbra Collaboration Suite Sieve Notify Filter Action Bypasses Mail Forwarding Restriction via Variable Expansion
Z
Patch status unknownEPSS %0
7.1
CVE-2026-50054
Zimbra Collaboration Suite GrantRightsRequest SOAP Handler Allows Self-Granting of Undocumented loginAs Mailbox Delegation Right
Z
Patch status unknownEPSS %0
6.5
CVE-2026-10631
Zimbra Collaboration Suite EWS Extension Authorization Bypass via Crafted Composite Folder/Item Identifier
Z
Patch status unknownEPSS %0
9.3
CVE-2026-93647
Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Crafted Calendar COUNTER Message From Address
Z
Patch status unknownEPSS %0
9.8
CVE-2026-93643
Zimbra Collaboration Suite OnlyOffice Integration Path Traversal Leading to Remote Code Execution via Unauthenticated /downloadas Request
Z
Patch status unknownEPSS %1
9.3
CVE-2026-93642
Zimbra Collaboration Suite Modern Web Client Stored Cross-Site Scripting via Forged Share Invitation
Z
Patch status unknownEPSS %0
9.3
CVE-2026-93641
Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Forged Share Invitation
Z
Patch status unknownEPSS %0
6.3
CVE-2026-73576
Vulnerability in Zimbra Collaboration
Z
Patch status unknownEPSS %0
3.1
CVE-2026-73575
Cross-site request forgery in Zimbra Collaboration
Z
Patch status unknownEPSS %0
3.1
CVE-2026-73574
Vulnerability in Zimbra Collaboration
Z
Patch status unknownEPSS %0