What’s Vulnerable › Products

Zimbra Collaboration Suite (ZCS) vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Zimbra Collaboration Suite (ZCS) version is affected

Latest Zimbra Collaboration Suite (ZCS) vulnerabilities

• CVE-2026-93647 — Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Crafted Calendar COUNTER Message From Address (CVSS 9.3)
• CVE-2026-93643 — Zimbra Collaboration Suite OnlyOffice Integration Path Traversal Leading to Remote Code Execution via Unauthenticated /downloadas Request (CVSS 9.8)
• CVE-2026-93642 — Zimbra Collaboration Suite Modern Web Client Stored Cross-Site Scripting via Forged Share Invitation (CVSS 9.3)
• CVE-2026-93641 — Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Forged Share Invitation (CVSS 9.3)