An authorization flaw in Zimbra Collaboration Suite’s GrantRightsRequest allows an attacker with access to an authenticated account to grant another…
An authorization flaw in Zimbra Collaboration Suite’s GrantRightsRequest allows an attacker with access to an authenticated account to grant another local account the loginAs right, creating persistent mailbox access and mail-sending authority that survives password changes and session expiry.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Zimbra
- Product
- Zimbra Collaboration
- CVSS
- 7.1
- EPSS
- 0.002 (p6)
- Exposure class
Why it ranks 28 (Notable)
- CVSS 7.1 high
- Exposed product class: email
- Covered by 2 independent sources
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-50054 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.