Lucene search
+L

6 matches found

NVD
NVD
•added 2026/10/08 5:17 p.m.•16 views

CVE-2026-50054

An authorization flaw in Zimbra Collaboration Suite’s GrantRightsRequest allows an attacker with access to an authenticated account to grant another local account the loginAs right, creating persistent mailbox access and mail-sending authority that survives password changes and session expiry...

7.1CVSS0.00171EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/08 4:25 p.m.•65 views

CVE-2026-50054 Zimbra Collaboration Suite GrantRightsRequest SOAP Handler Allows Self-Granting of Undocumented loginAs Mailbox Delegation Right

An authorization flaw in Zimbra Collaboration Suite’s GrantRightsRequest allows an attacker with access to an authenticated account to grant another local account the loginAs right, creating persistent mailbox access and mail-sending authority that survives password changes and session expiry...

7.1CVSS0.00171EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/08 4:25 p.m.•37 views

CVE-2026-50054

An authorization flaw in the Zimbra Collaboration Suite 's GrantRightsRequest SOAP handler allows an attacker with access to an authenticated account to grant another local account the loginAs right. This creates persistent mailbox access and mail-sending authority that remains active even after ...

7.1CVSS5.8AI score0.00171EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/08 4:25 p.m.•16 views

EUVD-2026-95097

An authorization flaw in Zimbra Collaboration Suite’s GrantRightsRequest allows an attacker with access to an authenticated account to grant another local account the loginAs right, creating persistent mailbox access and mail-sending authority that survives password changes and session expiry...

7.1CVSS5.8AI score0.00171EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•10 views

CVE-2026-50054: Improper Privilege Management

An authorization flaw in Zimbra Collaboration Suite’s GrantRightsRequest allows an attacker with access to an authenticated account to grant another local account the loginAs right, creating persistent mailbox access and mail-sending authority that survives password changes and session expiry...

7.1CVSS5.8AI score0.00171EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•30 views

PT-2026-108048

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite affected versions not specified Description An authorization flaw exists in the GrantRightsRequest function. An attacker with access to an authenticated account can grant another local account the loginAs right. This...

7.1CVSS5.8AI score0.00171EPSS
SaveExploits0References3
Rows per page
Query Builder