Zimbra

CISA Warns of Active Exploitation in Cisco, PaperCut, and Zimbra

• Vulnerability Report

CISA Warns of Active Exploitation in Cisco, PaperCut, and Zimbra

Do Son April 21, 2026 0

The Cybersecurity and Infrastructure Security Agency (CISA) has expanded its Known Exploited Vulnerabilities (KEV) Catalog, adding eight...

Read More Read more about CISA Warns of Active Exploitation in Cisco, PaperCut, and Zimbra

Triple Threat Patched: Zimbra 10.1.16 Fixes XSS, XXE & LDAP Injection

• Vulnerability Report

Triple Threat Patched: Zimbra 10.1.16 Fixes XSS, XXE & LDAP Injection

Do Son February 13, 2026 0

Zimbra has rolled out a significant security update for its collaboration suite, releasing Zimbra 10.1.16 to address...

Read More Read more about Triple Threat Patched: Zimbra 10.1.16 Fixes XSS, XXE & LDAP Injection

CISA Adds 4 Critical Flaws to “Must-Patch” List as Exploits Surge

• Vulnerability Report

CISA Adds 4 Critical Flaws to “Must-Patch” List as Exploits Surge

Do Son January 23, 2026 0

The Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities (KEV) Catalog with four...

Read More Read more about CISA Adds 4 Critical Flaws to “Must-Patch” List as Exploits Surge

Zimbra Under Siege: High-Severity LFI Vulnerability Exposes Internal Files to Unauthenticated Attackers

• Vulnerability Report

Zimbra Under Siege: High-Severity LFI Vulnerability Exposes Internal Files to Unauthenticated Attackers

Do Son December 25, 2025 0

Administrators of the popular Zimbra Collaboration Suite (ZCS) are being urged to patch immediately after the discovery...

Read More Read more about Zimbra Under Siege: High-Severity LFI Vulnerability Exposes Internal Files to Unauthenticated Attackers

Critical Zimbra Flaw Fixed: Patch Addresses Multiple Stored XSS and Unauthenticated LFI in Mail Client

• Vulnerability

Critical Zimbra Flaw Fixed: Patch Addresses Multiple Stored XSS and Unauthenticated LFI in Mail Client

Do Son November 11, 2025 0

Zimbra has issued a critical security patch, Zimbra Daffodil (v10.1.13), to address a host of vulnerabilities in...

Read More Read more about Critical Zimbra Flaw Fixed: Patch Addresses Multiple Stored XSS and Unauthenticated LFI in Mail Client

Zimbra Issues Emergency Patch for Critical SSRF Vulnerability in Chat Proxy Configuration

• Vulnerability Report

Zimbra Issues Emergency Patch for Critical SSRF Vulnerability in Chat Proxy Configuration

Do Son October 17, 2025 0

Zimbra has released an emergency security patch (version 10.1.12) to address a critical Server-Side Request Forgery (SSRF)...

Read More Read more about Zimbra Issues Emergency Patch for Critical SSRF Vulnerability in Chat Proxy Configuration

Zimbra XSS Zero-Day (CVE-2025-27915) Actively Exploited; CISA Adds to KEV Catalog

• Vulnerability Report

Zimbra XSS Zero-Day (CVE-2025-27915) Actively Exploited; CISA Adds to KEV Catalog

Do Son October 8, 2025 0

A cross-site scripting (XSS) vulnerability in Synacor Zimbra Collaboration Suite (ZCS) — tracked as CVE-2025-27915 — has...

Read More Read more about Zimbra XSS Zero-Day (CVE-2025-27915) Actively Exploited; CISA Adds to KEV Catalog

Lotus Blossom Hackers Target Southeast Asia with Sagerunex Backdoor

• Cyber Security
• Malware

Lotus Blossom Hackers Target Southeast Asia with Sagerunex Backdoor

Do Son March 2, 2025 0

A sophisticated cyber espionage operation linked to the Lotus Blossom group has been discovered targeting government, manufacturing,...

Read More Read more about Lotus Blossom Hackers Target Southeast Asia with Sagerunex Backdoor

CISA Flags Actively Exploited Zimbra (CVE-2023-34192) and Microsoft (CVE-2024-49035) Vulnerabilities

• Vulnerability

CISA Flags Actively Exploited Zimbra (CVE-2023-34192) and Microsoft (CVE-2024-49035) Vulnerabilities

Do Son February 25, 2025 0

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning, adding two critical vulnerabilities to its...

Read More Read more about CISA Flags Actively Exploited Zimbra (CVE-2023-34192) and Microsoft (CVE-2024-49035) Vulnerabilities

Zimbra Email Servers Under Attack: CISA Flags CVE-2024-45519 as Actively Exploited

• Vulnerability

Zimbra Email Servers Under Attack: CISA Flags CVE-2024-45519 as Actively Exploited

Do Son October 4, 2024 0

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Zimbra email servers,...

Read More Read more about Zimbra Email Servers Under Attack: CISA Flags CVE-2024-45519 as Actively Exploited

Winter Vivern Targets Roundcube’s Zero-Day Vulnerability

• Cyber Security
• Vulnerability

Winter Vivern Targets Roundcube’s Zero-Day Vulnerability

Do Son October 26, 2023 0

The cybercriminals under the pseudonym Winter Vivern were observed exploiting a zero-day vulnerability in the Roundcube Webmail...

Read More Read more about Winter Vivern Targets Roundcube’s Zero-Day Vulnerability