Known Vulnerabilities for Zm-mailbox by Zimbra
Listed below are 1 of the newest known vulnerabilities associated with "Zm-mailbox" by "Zimbra".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-123622 json | Usermin through 2.570 contains a cross-site scripting vulnerability in mailbox/detach.cgi that allows remote attackers to exe... | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-123621 json | Usermin through 2.570 contains a path traversal vulnerability in mailbox/detachall.cgi that allows remote unauthenticated att... | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-123324 json | In JetBrains YouTrack before 2026.2.19562 information disclosure via shared mailbox message history was possible | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-121735 json | blueprintUE self-hosted edition before 4.3.4 contains an insufficient session expiration vulnerability that allows attackers ... | Not Provided | 2026-11-03 | 2026-11-09 |
| CVE-2026-121551 json | PostfixAdmin through 4.0.5 contains a stored cross-site scripting vulnerability that allows authenticated mailbox users to in... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-119761 json | Axigen Mail Server WebMail before 10.6.39 and 10.7.1 contains a stored cross-site scripting vulnerability that allows unauthe... | Not Provided | 2026-10-30 | 2026-11-06 |
| CVE-2026-119049 json | FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users to claim another user's ... | Not Provided | 2026-10-29 | 2026-10-29 |
| CVE-2026-118641 json | n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains an OData $filter injection vulnerability in the Mic... | Not Provided | 2026-10-28 | 2026-10-29 |
| CVE-2026-118176 json | Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed using... | Not Provided | 2026-10-27 | 2026-11-04 |
| CVE-2026-116214 json | MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability that allows unauthenticated attackers to res... | Not Provided | 2026-10-26 | 2026-11-04 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Zimbra | Zm-mailbox | 8.8.9 | |||
| Application | Zimbra | Zm-mailbox | 8.8.9 | |||
| Application | Zimbra | Zm-mailbox | 8.8.9 | |||
| Application | Zimbra | Zm-mailbox | 8.8.9 | |||
| Application | Zimbra | Zm-mailbox | 8.8.9 | |||
| Application | Zimbra | Zm-mailbox | 8.8.9 | |||
| Application | Zimbra | Zm-mailbox | 8.8.9 | |||
| Application | Zimbra | Zm-mailbox | 8.8.9 | |||
| Application | Zimbra | Zm-mailbox | 8.8.9 | |||
| Application | Zimbra | Zm-mailbox | 8.8.8 | |||
| Application | Zimbra | Zm-mailbox | 8.8.8 | |||
| Application | Zimbra | Zm-mailbox | 8.8.8 | |||
| Application | Zimbra | Zm-mailbox | 8.8.8 | |||
| Application | Zimbra | Zm-mailbox | 8.8.8 | |||
| Application | Zimbra | Zm-mailbox | 8.8.8 | |||
| Application | Zimbra | Zm-mailbox | 8.8.8 | |||
| Application | Zimbra | Zm-mailbox | 8.8.8 | |||
| Application | Zimbra | Zm-mailbox | 8.8.7 | |||
| Application | Zimbra | Zm-mailbox | 8.8.6 | |||
| Application | Zimbra | Zm-mailbox | 8.8.6 |