https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:57:03.859931+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-07904 bdu:2026-07904 2026-10-02T14:57:03.862782+00:00 bdu:2026-07904 https://cve.radiocsirt.org/vuln/euvd-2026-276859 EUVD-2026-276859 2026-10-02T14:57:03.862813+00:00 EUVD-2026-276859 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33372 fkie_cve-2026-33372 2026-10-02T14:57:03.862827+00:00

An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A cross-site request forgery (CSRF) vulnerability exists in Zimbra Webmail due to improper validation of CSRF tokens. The application accepts CSRF tokens supplied within the request body instead of requiring them through the expected request header. An attacker can exploit this issue by tricking an authenticated user into submitting a crafted request. This may allow unauthorized actions to be performed on behalf of the victim.

 https://cve.radiocsirt.org/vuln/ghsa-fmww-x8fc-gqfj GHSA-fmww-x8fc-gqfj 2026-10-02T14:57:03.862855+00:00

An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A cross-site request forgery (CSRF) vulnerability exists in Zimbra Webmail due to improper validation of CSRF tokens. The application accepts CSRF tokens supplied within the request body instead of requiring them through the expected request header. An attacker can exploit this issue by tricking an authenticated user into submitting a crafted request. This may allow unauthorized actions to be performed on behalf of the victim.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0388 WID-SEC-W-2026-0388 — Synacor Zimbra: Mehrere Schwachstellen 2026-10-02T14:57:03.862872+00:00

Ein Angreifer kann mehrere Schwachstellen in Synacor Zimbra ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder Informationen offenzulegen.