Login Request a demo
ZC
Product
Zimbra Collaboration Suite (ZCS)
by Zimbra · last CVE Sep 25, 2026
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news5Timeline
Severity mix
Critical 4High 0Medium 0Low 0
Severity
All severities4Critical4High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Zimbra Collaboration Suite (ZCS) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-93643
9.8
1%
Sep 25
Zimbra Collaboration Suite OnlyOffice Integration Path Traversal Leading to Remote Code Execution via Unauthenticated /downloadas Request
Affected: before 10.1.21
CVE-2026-93647
9.3
0%
Sep 25
Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Crafted Calendar COUNTER Message From Address
Affected: before 10.1.21
CVE-2026-93642
9.3
0%
Sep 25
Zimbra Collaboration Suite Modern Web Client Stored Cross-Site Scripting via Forged Share Invitation
Affected: before 10.1.21
CVE-2026-93641
9.3
0%
Sep 25
Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Forged Share Invitation
Affected: before 10.1.21
Showing 4