CVE-2026-93642 in Collaboration Suiteinfo

Zusammenfassung

von MITRE • 25.09.2026

An unauthenticated sender can forge a share notification that triggers stored XSS when a signed-in Zimbra Modern recipient clicks Accept Share, allowing the attacker to access mailbox data and act as the victim.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Zuständig

Rapid7

Reservieren

18.09.2026

Veröffentlichung

25.09.2026

Moderieren

akzeptiert

Eintrag

VDB-410270

CPE

bereit

EPSS

0.00000

KEV

nein

Aktivitäten

very low

Sektor

Transportation, Government, ...

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-93642
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-93642
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-93642/

◂ ZurückÜbersichtWeiter ▸

Want to know what is going to be exploited?

We predict KEV entries!