https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:12:14.516041+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-352225 EUVD-2026-352225 2026-10-02T15:12:14.564032+00:00 EUVD-2026-352225 https://cve.radiocsirt.org/vuln/fkie_cve-2026-73575 fkie_cve-2026-73575 2026-10-02T15:12:14.564065+00:00

In Zimbra Collaboration (ZCS) before 10.1.17, a Cross-Site Request Forgery (CSRF) vulnerability exists in the Exchange Web Services (EWS) endpoint of Zimbra Collaboration (ZCS) due to insufficient validation of request content types. An attacker can exploit this vulnerability by causing an authenticated user to submit a crafted request, potentially allowing unauthorized actions to be performed on behalf of the victim.

 https://cve.radiocsirt.org/vuln/ghsa-2rhj-982v-52qv GHSA-2rhj-982v-52qv 2026-10-02T15:12:14.564096+00:00

In Zimbra Collaboration (ZCS) before 10.1.17, a Cross-Site Request Forgery (CSRF) vulnerability exists in the Exchange Web Services (EWS) endpoint of Zimbra Collaboration (ZCS) due to insufficient validation of request content types. An attacker can exploit this vulnerability by causing an authenticated user to submit a crafted request, potentially allowing unauthorized actions to be performed on behalf of the victim.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1735 WID-SEC-W-2026-1735 — Synacor Zimbra: Mehrere Schwachstellen 2026-10-02T15:12:14.564114+00:00

Ein Angreifer kann mehrere Schwachstellen in Synacor Zimbra ausnutzen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.