Skip to content
Threat Feed
Subscribe

Product

Zimbra Collaboration Suite Network Edition (10.1.16, 10.1.20)

1 brief RSS
high advisory

Zimbra Collaboration Suite: Cross-site request forgery in OAuth extension (CVE-2026-93631)

A cross-site request forgery vulnerability in the OAuth extension of Zimbra Collaboration Suite (ZCS) Network Edition allows an attacker to link an attacker-controlled external account to a victim's mailbox.

Zimbra Collaboration Suite Network Edition
1c