Cpe:2.3:a:zimbra:collaboration_suite:10.1.21:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3azimbracollaboration_suite10.1.21/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 23 Oct 2026 15:07:55 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgZimbra Collaboration Suite: Local privilege escalation in zmmailboxdmgr (CVE-2026-50056)https://feed.craftedsignal.io/briefs/2026-10-zimbra-lpe/Fri, 23 Oct 2026 15:07:55 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-zimbra-lpe/A local privilege escalation vulnerability in the Zimbra Collaboration Suite zmmailboxdmgr launcher allows the zimbra user to execute arbitrary commands as root via improper JVM argument validation in sudo.CVE-2026-50056 is a local privilege escalation vulnerability in the zmmailboxdmgr utility within Zimbra Collaboration Suite (ZCS). The vulnerability originates from a passwordless sudo configuration that fails to restrict JVM arguments, allowing a low-privileged user (zimbra account) to inject malicious arguments. By forcing a heap exhaustion event during the JVM startup sequence, an attacker can execute arbitrary commands via the OnOutOfMemoryError handler while the process still maintains root privileges, prior to the intended privilege drop.

Impact

Successful exploitation allows a local user already operating as the zimbra account to escalate privileges to root on the affected mailbox server. This bypasses security controls designed to drop privileges during the startup of the Jetty web container.

Recommendation

  1. Inventory all Zimbra Collaboration Suite mailbox server deployments to identify versions 10.1.16 and 10.1.21.
  2. Prioritize patching or applying vendor-supplied mitigations for the affected versions immediately.
  3. Until patched, monitor sudo logs and process creation patterns involving zmmailboxdmgr for unusual JVM arguments such as -XX:OnOutOfMemoryError.
]]>highadvisory