CVE-2026-93635

Vendor

Oracle

Product

oracle

CVSS

5.3

EPSS

0.002 (p6)

Exposure class

Email, Network management

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 22
   Research Rapid7 17d ago

   From One Account to Every Mailbox: Breaking Zimbra's Identity Boundaries (Part 1)

   An enterprise mail server authenticates users, stores private communications, delivers recovery links, runs calendars, and sends mail that employees and other systems trust. Compromising it can therefore expose both email and the…

   CVE-2026-93637CVE-2026-93635CVE-2026-73571+3 more Zimbra Rapid7
2. 15
   CVE NVD 17d ago

   LDAP filter injection in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to alter external LDAP search filters.

   LDAP filter injection in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to alter external LDAP search filters. On domains using search-filter authentication and lazy provisioning, this creates…

   CVSS 5.3 CVE-2026-93635 Oracle