What is CVE-2026-73574?

CVE-2026-73574 is a low-severity vulnerability in Zimbra Collaboration, classified under Incorrect Resource Transfer Between Spheres. CVSS score: 3.1/10. Published 2026-08-13.

How severe is CVE-2026-73574?

Low severity. CVSS v3 base score is 3.1 out of 10.

Vulnerability in Zimbra Collaboration

CVE-2026-73574

In Zimbra Collaboration before 10.1.17, a local file inclusion (LFI) vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability b…

CVSS v3 metric

CVSS v3 base score 3.1 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Zimbra Collaboration — versions 0

Weakness classification (CWE)

CWE-669 — Incorrect Resource Transfer Between Spheres

References

cve@mitre.org
cve@mitre.org

Frequently asked questions

What is CVE-2026-73574?: CVE-2026-73574 is a low-severity vulnerability in Zimbra Collaboration, classified under Incorrect Resource Transfer Between Spheres. CVSS score: 3.1/10. Published 2026-08-13.
How severe is CVE-2026-73574?: Low severity. CVSS v3 base score is 3.1 out of 10.