Zimbra Zimbra Collaboration Suite
3 CVEs affecting Zimbra Zimbra Collaboration Suite. Latest disclosed: 2026-10-08. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-50054 | High | 7.1 | 2026-10-08 | An authorization flaw in Zimbra Collaboration Suite’s GrantRightsRequest allows an attacker with access to an authenticated account to grant another local acco… |
CVE-2026-50055 | Medium | 6.5 | 2026-10-08 | A policy-enforcement flaw in Zimbra Collaboration Suite allows an authenticated user to bypass disabled mail forwarding by using a Sieve notify action to send… |
CVE-2026-10631 | Medium | 6.5 | 2026-10-08 | An authorization bypass in the EWS FindItem handler of Zimbra Collaboration Suite 10.1.0 through 10.1.19 allows an authenticated user with EWS enabled to read… |