zulip vulnerabilities and fixes

Recent CVEs affecting zulip, with upgrade or downgrade steps. 2 tracked.

zulip has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-04-03. Highest priority: CVE-2026-25742 (score 35/100).

• CVE-2026-25742 MEDIUM 5.3 UPGRADE Zulip is an open-source team collaboration tool
• CVE-2026-26058 MEDIUM 6.1 UPGRADE Zulip is an open-source team collaboration tool

FAQ

How do I fix zulip vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is zulip being exploited right now?

None of the tracked zulip CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which zulip CVE should I patch first?

CVE-2026-25742 currently ranks highest (35/100): Zulip is an open-source team collaboration tool.

← Back to latest CVEs