Zoho Mail Zoho Zeptomail
2 CVEs affecting Zoho Mail Zoho Zeptomail. Latest disclosed: 2026-02-20. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-49028 | High | 7.1 | 2025-12-31 | Cross-Site Request Forgery (CSRF) vulnerability in Zoho Mail Zoho ZeptoMail transmail allows Stored XSS.This issue affects Zoho ZeptoMail: from n/a through <=… |
CVE-2025-67972 | Medium | 4.3 | 2026-02-20 | Missing Authorization vulnerability in Zoho Mail Zoho ZeptoMail allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Zo… |