CVE-2026-50054

An authorization flaw in the Zimbra Collaboration Suite 's GrantRightsRequest SOAP handler allows an attacker with access to an authenticated account to grant another local account the loginAs right. This creates persistent mailbox access and mail-sending authority that remains active even after ...