CVE-2026-66911

Zimbra is vulnerable to stored cross-site scripting XSS via the Content-Location MIME header in email attachments. Due to lack of sanitization of the Content-Location header, an attacker can set it to a javascript: URI. An unauthenticated remote attacker can send a crafted email to a victim; when...