4 matches found
CVE-2026-73574
In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...
EUVD-2026-58073
In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...
CVE-2026-73574
In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...
CVE-2026-73574
CVE-2026-73574 affects Zimbra Collaboration (before 10.1.17). The issue is a local file inclusion (LFI) in the Forward servlet of the Classic Web Client due to improper validation of the fu request parameter, allowing an unauthenticated attacker to disclose protected files (e.g., WEB-INF/web.xml)...