CVE-2026-73575 in Collaborationinformación

Resumen

por MITRE • 2026-08-13

In Zimbra Collaboration (ZCS) before 10.1.17, a Cross-Site Request Forgery (CSRF) vulnerability exists in the Exchange Web Services (EWS) endpoint of Zimbra Collaboration (ZCS) due to insufficient validation of request content types. An attacker can exploit this vulnerability by causing an authenticated user to submit a crafted request, potentially allowing unauthorized actions to be performed on behalf of the victim.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsable

MITRE

Reservar

2026-08-13

Divulgación

2026-08-13

Moderación

aceptado

Artículo

VDB-389613

CPE

listo

EPSS

0.00000

KEV

no

Actividades

muy bajo

Fuentes

Do you need the next level of professionalism?

Upgrade your account now!