Zero Day MonitorZDM

← Back to list

EST

PRE-CVEPATCHED

zimbra · zimbra collaboration suite (zcs) classic web

Zimbra Collaboration Suite Classic Web Client vulnerabilities

72% confidence

Description

Multiple vulnerabilities in Zimbra Collaboration Suite (ZCS) Classic Web Client versions prior to v10.1.20

Affected Products

Vendor	Product	Versions
zimbra	zimbra collaboration suite (zcs) classic web	< 10.1.20

Related News (1 articles)

Tier B

CCCS Canada69d ago

Zimbra security advisory (AV26-721)

→ No new info (linked only)

Discussion (0)

Loading…

CISA KEV❌ No

Actively exploited❌ No

Patch available

10.1.20

PublishedJul 20, 2026

Last enriched69d ago

Tags

zimbraweb-clientcollaboration

Trending Score0

Source articles1

Independent1

Info Completeness6/14

Missing: cve_id, cvss, epss, cwe, kev, exploit, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

CRITICALCVE-2026-93643

Zimbra Collaboration Suite OnlyOffice Integration Path Traversal Leading to Remote Code Execution via Unauthenticated /downloadas Request

CRITICALCVE-2026-93641

Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Forged Share Invitation

CRITICALCVE-2026-93647

Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Crafted Calendar COUNTER Message From Address

CRITICALCVE-2026-93642

Zimbra Collaboration Suite Modern Web Client Stored Cross-Site Scripting via Forged Share Invitation

LOWCVE-2026-73574

CVE-2026-73574: In Zimbra Collaboration before 10.1.17, a local file inclusion (LFI) vulnerability exists in the Zimbra Classic Web Clie

Pin to Dashboard

Verification

State: reported

Confidence: 72%

Vulnerability Timeline

CVE Published

Jul 20, 2026

Patch Available

Jul 20, 2026

Discovered by ZDM

Jul 20, 2026