CVE-2026-73575 in Collaborationالمعلومات

الملخص

بحسب MITRE • 13/08/2026

In Zimbra Collaboration (ZCS) before 10.1.17, a Cross-Site Request Forgery (CSRF) vulnerability exists in the Exchange Web Services (EWS) endpoint of Zimbra Collaboration (ZCS) due to insufficient validation of request content types. An attacker can exploit this vulnerability by causing an authenticated user to submit a crafted request, potentially allowing unauthorized actions to be performed on behalf of the victim.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

مسؤول

MITRE

حجز

13/08/2026

إفشاء

13/08/2026

الاعتدال

تمت الموافقة

إدخال

VDB-389613

EPSS

0.00000

KEV

لا

النشاطات

منخفض جدًا

المصادر

Do you need the next level of professionalism?

Upgrade your account now!