CVE-2022-27925

CVE-2022-27925 Zimbra RCE 2022 This repo is part of the hgrab-framework dork title: "Zimbra Web Client Sign In" Affected product Zimbra Collaboration Suite Network Edition 9.0.0 Patch 23 and earlier Zimbra Collaboration Suite Network Edition 8.8.15 Patch 30 and earlier Installation Install the ap...

Poc_CVE-2025-68645

CVE-2025-68645 - Zimbra 경로 순회 취약점 📋 개요 CVE-2025-68645 는 Zimbra Collaboration Suite 의 경로 순회 취약점으로, 인증되지 않은 공격자가 서버 파일 시스템에서 임의 파일을 읽을 수 있습니다. 취약한 엔드포인트 /h/printconversations?javax.servlet.include.servletpath= 🎯 영향 영향| 심각도 ---|--- 인증되지 않은 파일 읽기| 🔴 높음 구성 정보 노출| 🔴 높음 자격 증명 유출| 🔴 높음 내부 네트워크 매핑| 🟠 중간 📁...

Zimbra Collaboration Suite 8.8.15/9.0 - Zip Path Traversal

Zimbra Collaboration aka ZCS 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal. id: CVE-2022-27925 info: name:...

CVE-2026-73570

🔴 CVE-2026-73570 — 高深刻度の未認証RCE ⚠️ 未認証のOSコマンドインジェクション → リモートコード実行 Zimbra Collaboration Suite · SNMP通知処理 🧠 概要 CVE-2026-73570 は、Zimbra Collaboration Suite の特定の構成に影響を与える高深刻度の OSコマンドインジェクション脆弱性 です。 この脆弱性は SNMP通知処理コンポーネント...

CVE-2025-68645

ZimLFI-Hunter CVE-2025-68645 ZimLFI-Hunter is a professional Proof-of-Concept PoC scanner designed to identify the CVE-2025-68645 vulnerability in Zimbra Collaboration Suite. This tool detects Local File Inclusion LFI flaws through the /h/printcalendar endpoint. 🛡️ Vulnerability Overview The...

Zimbra-CVE-2026-73570-Rules

Wazuh ルール CVE-2026-73570（Zimbra OSコマンドインジェクション） CVE-2026-73570 の検知ルールです。Zimbra Collaboration Suite における SNMP トラップ通知パラメータ（snmpnotify）を介した OS コマンドインジェクションを検知します。 脆弱性 フィールド| 詳細 ---|--- CVE| CVE-2026-73570 種別| OS コマンドインジェクション 影響を受けるバージョン| Zimbra Collaboration Suite ブロック）にログソースを追加します: apache...

CVE-2026-73570

CVE-2026-73570 — Zimbra zimbra-snmp 未認証OSコマンドインジェクション PoC CVE-2026-73570 の概念実証エクスプロイト。これは Zimbra Collaboration Suite 免責事項: この PoC は認可されたセキュリティテスト 、防御的研究、および自身のシステムの検証のみ を目的としています。所有していないシステム、またはテストに対する明示的な書面による許可を持たないシステムに対して使用しないでください。 脆弱性のメカニズム Zimbra の SNMP 通知機能は swatchdog を使用して...

CVE-2026-73570

CVE-2026-73570 — Zimbra ZCS SNMP Notification RCE exploit PoC Unauthenticated Remote Code Execution via OS Command Injection in the Zimbra Collaboration Suite SNMP notification handler. Overview Field| Value ---|--- CVE| CVE-2026-73570 CVSS 3.1| 8.9 HIGH — AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L CWE|...

CVE-2026-50054

An authorization flaw in Zimbra Collaboration Suite’s GrantRightsRequest allows an attacker with access to an authenticated account to grant another local account the loginAs right, creating persistent mailbox access and mail-sending authority that survives password changes and session expiry...

CVE-2026-50055

A policy-enforcement flaw in Zimbra Collaboration Suite allows an authenticated user to bypass disabled mail forwarding by using a Sieve notify action to send copies of email content and headers to an arbitrary address...

CVE-2026-10631

An authorization bypass in the EWS FindItem handler of Zimbra Collaboration Suite 10.1.0 through 10.1.19 allows an authenticated user with EWS enabled to read complete mailbox items, including raw MIME and attachments, from arbitrary local accounts without a share or delegation grant...

CVE-2026-50055 Zimbra Collaboration Suite Sieve Notify Filter Action Bypasses Mail Forwarding Restriction via Variable Expansion

A policy-enforcement flaw in Zimbra Collaboration Suite allows an authenticated user to bypass disabled mail forwarding by using a Sieve notify action to send copies of email content and headers to an arbitrary address...

EUVD-2026-95098

A policy-enforcement flaw in Zimbra Collaboration Suite allows an authenticated user to bypass disabled mail forwarding by using a Sieve notify action to send copies of email content and headers to an arbitrary address...

CVE-2026-50055

A policy-enforcement flaw in Zimbra Collaboration Suite allows an authenticated user to bypass disabled mail forwarding restrictions. By using a Sieve notify action to send copies of email content and headers to an arbitrary address, an attacker can exfiltrate emails. This vulnerability was disco...

CVE-2026-50054 Zimbra Collaboration Suite GrantRightsRequest SOAP Handler Allows Self-Granting of Undocumented loginAs Mailbox Delegation Right

An authorization flaw in Zimbra Collaboration Suite’s GrantRightsRequest allows an attacker with access to an authenticated account to grant another local account the loginAs right, creating persistent mailbox access and mail-sending authority that survives password changes and session expiry...

CVE-2026-50054

An authorization flaw in the Zimbra Collaboration Suite 's GrantRightsRequest SOAP handler allows an attacker with access to an authenticated account to grant another local account the loginAs right. This creates persistent mailbox access and mail-sending authority that remains active even after ...

EUVD-2026-95097

An authorization flaw in Zimbra Collaboration Suite’s GrantRightsRequest allows an attacker with access to an authenticated account to grant another local account the loginAs right, creating persistent mailbox access and mail-sending authority that survives password changes and session expiry...

CVE-2026-10631 Zimbra Collaboration Suite EWS Extension Authorization Bypass via Crafted Composite Folder/Item Identifier

An authorization bypass in the EWS FindItem handler of Zimbra Collaboration Suite 10.1.0 through 10.1.19 allows an authenticated user with EWS enabled to read complete mailbox items, including raw MIME and attachments, from arbitrary local accounts without a share or delegation grant...

CVE-2026-10631

An authorization bypass exists in the EWS FindItem handler of Zimbra Collaboration Suite versions 10.1.0 through 10.1.19 . An authenticated user with EWS enabled can use a crafted composite folder/item identifier to read complete mailbox items, including raw MIME and attachments , from arbitrary ...

EUVD-2026-95096

An authorization bypass in the EWS FindItem handler of Zimbra Collaboration Suite 10.1.0 through 10.1.19 allows an authenticated user with EWS enabled to read complete mailbox items, including raw MIME and attachments, from arbitrary local accounts without a share or delegation grant...