CVE-2026-73575 in CollaborationИнформация

Сводка

по MITRE • 13.08.2026

In Zimbra Collaboration (ZCS) before 10.1.17, a Cross-Site Request Forgery (CSRF) vulnerability exists in the Exchange Web Services (EWS) endpoint of Zimbra Collaboration (ZCS) due to insufficient validation of request content types. An attacker can exploit this vulnerability by causing an authenticated user to submit a crafted request, potentially allowing unauthorized actions to be performed on behalf of the victim.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Ответственный

MITRE

Резервировать

13.08.2026

Раскрытие

13.08.2026

Модерация

принято

Вход

VDB-389613

EPSS

0.00000

KEV

Нет

Деятельности

Очень низкий

Источники

Want to know what is going to be exploited?

We predict KEV entries!