https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:34:04.231681+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-16353 bdu:2025-16353 2026-10-03T00:34:04.311121+00:00 bdu:2025-16353 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0970 certfr-2025-avi-0970 — De multiples vulnérabilités ont été découvertes dans Synacor Zimbra Collaboration. Certaines d'entre elles permettent à… 2026-10-03T00:34:04.311162+00:00 certfr-2025-avi-0970 https://cve.radiocsirt.org/vuln/euvd-2026-271188 EUVD-2026-271188 2026-10-03T00:34:04.311183+00:00 EUVD-2026-271188 https://cve.radiocsirt.org/vuln/fkie_cve-2025-68645 fkie_cve-2025-68645 2026-10-03T00:34:04.311195+00:00

A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1 because of improper handling of user-supplied request parameters in the RestFilter servlet. An unauthenticated remote attacker can craft requests to the /h/rest endpoint to influence internal request dispatching, allowing inclusion of arbitrary files from the WebRoot directory.

 https://cve.radiocsirt.org/vuln/ghsa-xc78-3c4g-m5g9 GHSA-xc78-3c4g-m5g9 2026-10-03T00:34:04.311262+00:00

A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1 because of improper handling of user-supplied request parameters in the RestFilter servlet. An unauthenticated remote attacker can craft requests to the /h/rest endpoint to influence internal request dispatching, allowing inclusion of arbitrary files from the WebRoot directory.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2911 WID-SEC-W-2025-2911 — Synacor Zimbra: Mehrere Schwachstellen 2026-10-03T00:34:04.311280+00:00

Ein Angreifer kann mehrere Schwachstellen in Synacor Zimbra ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, und um beliebigen Programmcode auszuführen.