https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T12:22:05.749785+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-1041 certfr-2026-avi-1041 — De multiples vulnérabilités ont été découvertes dans Synacor Zimbra Collaboration. Certaines d'entre elles permettent à… 2026-10-16T12:22:05.753228+00:00 certfr-2026-avi-1041 https://cve.radiocsirt.org/vuln/euvd-2026-384703 EUVD-2026-384703 2026-10-16T12:22:05.753267+00:00 EUVD-2026-384703 https://cve.radiocsirt.org/vuln/fkie_cve-2026-10631 fkie_cve-2026-10631 2026-10-16T12:22:05.753282+00:00

An authorization bypass in the EWS FindItem handler of Zimbra Collaboration Suite 10.1.0 through 10.1.19 allows an authenticated user with EWS enabled to read complete mailbox items, including raw MIME and attachments, from arbitrary local accounts without a share or delegation grant.

 https://cve.radiocsirt.org/vuln/ghsa-7jfc-2g3q-h5mf GHSA-7jfc-2g3q-h5mf 2026-10-16T12:22:05.753309+00:00

An authorization bypass in the EWS FindItem handler of Zimbra Collaboration Suite 10.1.0 through 10.1.19 allows an authenticated user with EWS enabled to read complete mailbox items, including raw MIME and attachments, from arbitrary local accounts without a share or delegation grant.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2429 WID-SEC-W-2026-2429 — Synacor Zimbra: Mehrere Schwachstellen 2026-10-16T12:22:05.753325+00:00

Ein Angreifer kann mehrere Schwachstellen in Synacor Zimbra ausnutzen, um beliebigen Programmcode auszuführen, Cross-Site-Scripting-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und unbefugte Aktionen durchzuführen.