CVE-2026-115785

The Zimbra Collaboration Suite (ZCS) versions 10.1.16 and 10.1.20 are vulnerable to an SMTP command injection vulnerability within the data-source testing functionality. An authenticated user with account options enabled can perform a JSON SOAP request to inject CR/LF sequences into the emailAddr...