https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:40:15.773445+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-736 certfr-2022-avi-736 — De multiples vulnérabilités ont été découvertes dans Zimbra. Elles permettent à un attaquant de provoquer une exécution… 2026-10-03T09:40:15.842994+00:00 certfr-2022-avi-736 https://cve.radiocsirt.org/vuln/euvd-2026-18729 EUVD-2026-18729 2026-10-03T09:40:15.843059+00:00 EUVD-2026-18729 https://cve.radiocsirt.org/vuln/fkie_cve-2022-37043 fkie_cve-2022-37043 2026-10-03T09:40:15.843088+00:00

An issue was discovered in the webmail component in Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0. When using preauth, CSRF tokens are not checked on some POST endpoints. Thus, when an authenticated user views an attacker-controlled page, a request will be sent to the application that appears to be intended. The CSRF token is omitted from the request, but the request still succeeds.

 https://cve.radiocsirt.org/vuln/ghsa-p738-hfmq-65wm GHSA-p738-hfmq-65wm 2026-10-03T09:40:15.843138+00:00

An issue was discovered in the webmail component in Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0. When using preauth, CSRF tokens are not checked on some POST endpoints. Thus, when an authenticated user views an attacker-controlled page, a request will be sent to the application that appears to be intended. The CSRF token is omitted from the request, but the request still succeeds.

 https://cve.radiocsirt.org/vuln/gsd-2022-37043 gsd-2022-37043 2026-10-03T09:40:15.843174+00:00 gsd-2022-37043