zimbra collaboration suite vulnerabilities and fixes

Recent CVEs affecting zimbra collaboration suite, with upgrade or downgrade steps. 7 tracked.

Also searched as: zimbracollaborationsuite.

zimbra collaboration suite has 7 tracked vulnerabilities, 0 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 7. Most recent: 2026-08-13. Highest priority: CVE-2026-73570 (score 91/100).

• CVE-2026-73571 LOW 3.1 UPGRADE An authorization bypass vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.17 due to improper auth
• CVE-2026-73572 MEDIUM 6.1 UPGRADE In Zimbra Collaboration (ZCS) before 10.1.17, a stored cross-site scripting (XSS) vulnerability exists in the
• CVE-2026-73573 LOW 3.1 UPGRADE In Zimbra Collaboration (ZCS) before 10.1.17, a path traversal vulnerability exists in the Zimbra Briefcase do
• CVE-2026-73574 LOW 3.1 UPGRADE In Zimbra Collaboration before 10.1.17, a local file inclusion (LFI) vulnerability exists in the Zimbra Classi
• CVE-2026-73575 LOW 3.1 UPGRADE In Zimbra Collaboration (ZCS) before 10.1.17, a Cross-Site Request Forgery (CSRF) vulnerability exists in the
• CVE-2026-73576 MEDIUM 6.3 UPGRADE In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability exists in the On
• CVE-2026-73570 HIGH 8.9 EXPLOITED UPGRADE Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

FAQ

How do I fix zimbra collaboration suite vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is zimbra collaboration suite being exploited right now?

Yes: 1 zimbra collaboration suite CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.

Which zimbra collaboration suite CVE should I patch first?

CVE-2026-73570 currently ranks highest (91/100): Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability.

RSS feed for zimbra collaboration suite · ← Back to latest CVEs