CVE-2025-54391

A vulnerability in the EnableTwoFactorAuthRequest SOAP endpoint of Zimbra Collaboration ZCS allows an attacker with valid user credentials to bypass Two-Factor Authentication 2FA protection. The attacker can configure an additional 2FA method either a third-party authenticator app or email-based...

CVE-2025-54391

A vulnerability in the EnableTwoFactorAuthRequest SOAP endpoint of Zimbra Collaboration ZCS allows an attacker with valid user credentials to bypass Two-Factor Authentication 2FA protection. The attacker can configure an additional 2FA method either a third-party authenticator app or email-based...

CVE-2025-54391

A vulnerability exists in the EnableTwoFactorAuthRequest SOAP endpoint of Zimbra Collaboration (ZCS) . An attacker with valid user credentials can bypass Two-Factor Authentication (2FA) protection by configuring an additional 2FA method (such as a third-party authenticator app or email-based 2FA)...