https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:43:01.509451+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-352224 EUVD-2026-352224 2026-10-02T10:43:01.512425+00:00 EUVD-2026-352224 https://cve.radiocsirt.org/vuln/fkie_cve-2026-73574 fkie_cve-2026-73574 2026-10-02T10:43:01.512455+00:00

In Zimbra Collaboration before 10.1.17, a local file inclusion (LFI) vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorized disclosure of protected files, such as WEB-INF/web.xml, within the web application directory. This occurs in the Forward servlet.

 https://cve.radiocsirt.org/vuln/ghsa-79qx-wf73-69v4 GHSA-79qx-wf73-69v4 2026-10-02T10:43:01.512485+00:00

In Zimbra Collaboration before 10.1.17, a local file inclusion (LFI) vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorized disclosure of protected files, such as WEB-INF/web.xml, within the web application directory. This occurs in the Forward servlet.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1735 WID-SEC-W-2026-1735 — Synacor Zimbra: Mehrere Schwachstellen 2026-10-02T10:43:01.512503+00:00

Ein Angreifer kann mehrere Schwachstellen in Synacor Zimbra ausnutzen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.