CVE-2026-10631

An authorization bypass in the EWS FindItem handler of Zimbra Collaboration Suite 10.1.0 through 10.1.19 allows an authenticated user with EWS enabled to read complete mailbox items, including raw MIME and attachments, from arbitrary local accounts without a share or delegation grant...

CVE-2026-10631 Zimbra Collaboration Suite EWS Extension Authorization Bypass via Crafted Composite Folder/Item Identifier

An authorization bypass in the EWS FindItem handler of Zimbra Collaboration Suite 10.1.0 through 10.1.19 allows an authenticated user with EWS enabled to read complete mailbox items, including raw MIME and attachments, from arbitrary local accounts without a share or delegation grant...

EUVD-2026-95096

An authorization bypass in the EWS FindItem handler of Zimbra Collaboration Suite 10.1.0 through 10.1.19 allows an authenticated user with EWS enabled to read complete mailbox items, including raw MIME and attachments, from arbitrary local accounts without a share or delegation grant...

CVE-2026-10631

An authorization bypass exists in the EWS FindItem handler of Zimbra Collaboration Suite versions 10.1.0 through 10.1.19 . An authenticated user with EWS enabled can use a crafted composite folder/item identifier to read complete mailbox items, including raw MIME and attachments , from arbitrary ...

CVE-2026-10631 Zimbra Collaboration Suite EWS Extension Authorization Bypass via Crafted Composite Folder/Item Identifier

An authorization bypass in the EWS FindItem handler of Zimbra Collaboration Suite 10.1.0 through 10.1.19 allows an authenticated user with EWS enabled to read complete mailbox items, including raw MIME and attachments, from arbitrary local accounts without a share or delegation grant...

CVE-2026-10631: Authorization Bypass Through User-Controlled Key

An authorization bypass in the EWS FindItem handler of Zimbra Collaboration Suite 10.1.0 through 10.1.19 allows an authenticated user with EWS enabled to read complete mailbox items, including raw MIME and attachments, from arbitrary local accounts without a share or delegation grant...

PT-2026-108044

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite versions 10.1.0 through 10.1.19 Description An authorization bypass exists in the EWS FindItem handler. This issue allows an authenticated user with Exchange Web Services EWS enabled to read complete mailbox items,...

Troubleshooting Exchange AIR

Challenge You are not able to proceed through AIR wizard to perform application item recovery. You are not able to restore individual mailbox items. Cause vLab is misconfigured or you do not have sufficient permissions. Solution To address the issue, follow the steps below: 1. Make sure vLab is...