Known Vulnerabilities for Zm-mailbox by Zimbra
Listed below are 1 of the newest known vulnerabilities associated with "Zm-mailbox" by "Zimbra".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-111884 json | phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta does not require the current password when changing an account e-mail... | Not Provided | 2026-10-17 | 2026-10-18 |
| CVE-2026-109675 json | Frappe Suite before commit 2697564a9c46da6acc614743eaf9915fe5238f4f contains a broken access control vulnerability in the get... | Not Provided | 2026-10-12 | 2026-10-18 |
| CVE-2026-109174 json | MoguBlog through 6.2 contains an information disclosure vulnerability that allows low-privileged front-end users to read syst... | Not Provided | 2026-10-12 | 2026-10-13 |
| CVE-2026-107586 json | Uncontrolled eviction in the browser session table of the REST API in Progressive Robot hMailServer 6.2.28 through 6.3.5 allo... | Not Provided | 2026-10-08 | 2026-10-08 |
| CVE-2026-107574 json | Inefficient algorithmic complexity in the JSON reader of Progressive Robot hMailServer allows a remote unauthenticated attack... | Not Provided | 2026-10-08 | 2026-10-08 |
| CVE-2026-107393 json | FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.235, when APP_CLOUDFLARE_IS_USED is enabled, FreeScout ... | Not Provided | 2026-10-08 | 2026-10-14 |
| CVE-2026-106454 json | Twisted is an event-based framework for internet applications, supporting Python 3.6+. In 25.5.0 and earlier, wildcardToRegex... | Not Provided | 2026-10-06 | 2026-10-07 |
| CVE-2026-105833 json | EspoCRM before 10.0.5 contains an insecure direct object reference vulnerability in PersonalAccount\Service that allows users... | Not Provided | 2026-10-08 | 2026-10-08 |
| CVE-2026-104978 json | Plane is an open-source project management tool. Prior to 1.4.0, Plane's project invitation list endpoint is accessible to an... | Not Provided | 2026-10-05 | 2026-10-07 |
| CVE-2026-104808 json | DigitalCanion has discovered a stored Cross-Site Scripting (XSS) vulnerability that allows an authenticated malicious user to... | Not Provided | 2026-10-05 | 2026-10-05 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Zimbra | Zm-mailbox | 8.8.9 | |||
| Application | Zimbra | Zm-mailbox | 8.8.9 | |||
| Application | Zimbra | Zm-mailbox | 8.8.9 | |||
| Application | Zimbra | Zm-mailbox | 8.8.9 | |||
| Application | Zimbra | Zm-mailbox | 8.8.9 | |||
| Application | Zimbra | Zm-mailbox | 8.8.9 | |||
| Application | Zimbra | Zm-mailbox | 8.8.9 | |||
| Application | Zimbra | Zm-mailbox | 8.8.9 | |||
| Application | Zimbra | Zm-mailbox | 8.8.9 | |||
| Application | Zimbra | Zm-mailbox | 8.8.8 | |||
| Application | Zimbra | Zm-mailbox | 8.8.8 | |||
| Application | Zimbra | Zm-mailbox | 8.8.8 | |||
| Application | Zimbra | Zm-mailbox | 8.8.8 | |||
| Application | Zimbra | Zm-mailbox | 8.8.8 | |||
| Application | Zimbra | Zm-mailbox | 8.8.8 | |||
| Application | Zimbra | Zm-mailbox | 8.8.8 | |||
| Application | Zimbra | Zm-mailbox | 8.8.8 | |||
| Application | Zimbra | Zm-mailbox | 8.8.7 | |||
| Application | Zimbra | Zm-mailbox | 8.8.6 | |||
| Application | Zimbra | Zm-mailbox | 8.8.6 |