CVE-2026-93629

The Zimbra Collaboration Suite (ZCS) versions 10.1.16 and 10.1.21 are vulnerable to an authentication bypass in calendar processing. An unauthenticated email sender can insert calendar invitations attributed to another user by exploiting a lack of verification for the iCalendar ORGANIZER identity...