CVE-2026-73571

Vendor

Zimbra

Product

Zimbra Collaboration

CVSS

3.1

EPSS

0.002 (p6)

Exposure class

Email, Network management

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 22
   Research Rapid7 17d ago

   From One Account to Every Mailbox: Breaking Zimbra's Identity Boundaries (Part 1)

   An enterprise mail server authenticates users, stores private communications, delivers recovery links, runs calendars, and sends mail that employees and other systems trust. Compromising it can therefore expose both email and the…

   CVE-2026-93637CVE-2026-93635CVE-2026-73571+3 more Zimbra Rapid7
2. 12
   CVE NVD 13 Aug 2026

   An authorization bypass vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.17 due to improper authorization validation in delegated email…

   An authorization bypass vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can send specially crafted…

   CVSS 3.1 CVE-2026-73571 Zimbra