CVE-2026-33369

Zimbra Collaboration (ZCS) versions 10.0 and 10.1 are affected by an LDAP injection in the Mailbox SOAP service during a FolderAction operation. The vulnerability arises because user input is not properly sanitized before being incorporated into an LDAP search filter, enabling an authenticated at...