What is CVE-2026-73571?

CVE-2026-73571 is a low-severity vulnerability in Zimbra Collaboration, classified under Incorrect Authorization. CVSS score: 3.1/10. Published 2026-08-13.

How severe is CVE-2026-73571?

Low severity. CVSS v3 base score is 3.1 out of 10.

Auth bypass in Zimbra Collaboration

CVE-2026-73571

An authorization bypass vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests…

Vulnerability class: Broken Access Control

CVSS v3 metric

CVSS v3 base score 3.1 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N.

Affected products

Zimbra Collaboration — versions 0

Weakness classification (CWE)

CWE-863 — Incorrect Authorization

References

cve@mitre.org
cve@mitre.org

Frequently asked questions

What is CVE-2026-73571?: CVE-2026-73571 is a low-severity vulnerability in Zimbra Collaboration, classified under Incorrect Authorization. CVSS score: 3.1/10. Published 2026-08-13.
How severe is CVE-2026-73571?: Low severity. CVSS v3 base score is 3.1 out of 10.