CVE-2026-115474

The open-source team collaboration tool Zulip versions 8.0 through 12.2 are vulnerable to a permission bypass (CWE-862). In organizations where guests are restricted from viewing other users, the system fails to verify if a sender has permission to access draft recipients when saving or editing a...