All 5 CVE vulnerabilities found in Zimbra Collaboration Suite (ZCS), with AI-generated Chinese analysis, references, and POCs.
Vendor: Synacor
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-93647 | Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Crafted Calendar COUNTER Message From Address CWE-79 | 9.3 | Critical | 2026-09-25 |
| CVE-2026-93643 | Zimbra Collaboration Suite OnlyOffice Integration Path Traversal Leading to Remote Code Execution via Unauthenticated /downloadas Request CWE-22 | 9.8 | Critical | 2026-09-25 |
| CVE-2026-93642 | Zimbra Collaboration Suite Modern Web Client Stored Cross-Site Scripting via Forged Share Invitation CWE-79 | 9.3 | Critical | 2026-09-25 |
| CVE-2026-93641 | Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Forged Share Invitation CWE-79 | 9.3 | Critical | 2026-09-25 |
| CVE-2022-3569 | Zimbra Collaboration Suite 安全漏洞 CWE-271 | 7.8 | - | 2022-10-17 |
All 5 known CVE vulnerabilities affecting Zimbra Collaboration Suite (ZCS) with full Chinese analysis, references, and POCs where available.