What’s Vulnerable › Vulnerabilities

CVE-2026-93635: Zimbra Collaboration Suite LDAP Filter Injection via Unescaped computeDn() Template Substitution

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-14 · updated 2026-10-16
• Weakness: CWE-90

Description

LDAP filter injection in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to alter external LDAP search filters. On domains using search-filter authentication and lazy provisioning, this creates a password oracle for external directory users. Authenticated S/MIME lookups can also return certificates and identity data for unintended directory entries.

Affected products

• Zimbra Collaboration: through 10.1.21

In the news

• From One Account to Every Mailbox: Breaking Zimbra's Identity Boundaries (Part 1)

References

• https://www.rapid7.com/blog/post/ve-breaking-zimbra-identity-boundaries-part-1

Get alerted when CVE-2026-93635 or the next vulnerability affects your stack