← All credits
Jonah Burgess (CryptoCat), Senior Security Researcher, Rapid7
26 vulnerability records and advisories credit this contributor.
CVE-2026-50056
Zimbra Collaboration Suite Local Privilege Escalation via zmmailboxdmgr JVM Argument Injection
CVE-2026-50057
Zimbra Collaboration Suite Local Privilege Escalation via Unrestricted Postfix Sudo Permissions
CVE-2026-115785
Zimbra Collaboration Suite Data Source Test SMTP Command Injection via Unsanitized Email Address
CVE-2026-10632
Zimbra Collaboration Suite Classic Web Client Reflected Cross-Site Scripting via Document Editor Packages Parameter
CVE-2026-50053
Zimbra Collaboration Suite RestFilter Request Attribute Override via Unauthenticated URL Parameters
CVE-2026-93627
Zimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar CANCEL/REQUEST Organizer
CVE-2026-93628
Zimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar REPLY Attendee Response
CVE-2026-93629
Zimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar REQUEST Organizer Identity
CVE-2026-93630
Zimbra Collaboration Suite Email HTML Sanitizer Bypass via Hostname Canonicalization
CVE-2026-93631
Zimbra Collaboration Suite OAuth Extension Cross-Site Request Forgery Enables Account Linking