EUVD-2026-13698

An issue was discovered in Zimbra Collaboration ZCS 10.0 and 10.1. A cross-site request forgery CSRF vulnerability exists in Zimbra Webmail due to improper validation of CSRF tokens. The application accepts CSRF tokens supplied within the request body instead of requiring them through the expecte...

CVE-2026-33372

Zimbra Collaboration (ZCS) versions 10.0 and 10.1 are affected by a Cross-Site Request Forgery (CSRF) vulnerability in Zimbra Webmail . The root cause is the improper validation of CSRF tokens , as the application incorrectly accepts tokens supplied within the request body instead of requiring th...

CVE-2026-33372

An issue was discovered in Zimbra Collaboration ZCS 10.0 and 10.1. A cross-site request forgery CSRF vulnerability exists in Zimbra Webmail due to improper validation of CSRF tokens. The application accepts CSRF tokens supplied within the request body instead of requiring them through the expecte...