CVE-2026-93639

A missing authorization vulnerability in Zimbra Collaboration Suite (ZCS) versions 10.1.16 and 10.1.20 allows a delegated administrator to overwrite global Zimlet configurations via ConfigureZimletRequest without explicit administrative grants. An attacker can leverage this to add a controlled do...