CVE-2025-54391

A vulnerability exists in the EnableTwoFactorAuthRequest SOAP endpoint of Zimbra Collaboration (ZCS) . An attacker with valid user credentials can bypass Two-Factor Authentication (2FA) protection by configuring an additional 2FA method (such as a third-party authenticator app or email-based 2FA)...