← All credits
Jonah Burgess (CryptoCat), Senior Security Researcher, Rapid7
26 vulnerability records and advisories credit this contributor.
CVE-2026-93633
Zimbra Collaboration Suite Briefcase CSS Sanitization Bypass via Non-ASCII Stylesheet Characters
CVE-2026-93634
Zimbra Collaboration Suite Cross-Account Authorization Bypass via Forged Shared-File Records
CVE-2026-93636
Zimbra Collaboration Suite LDAP Filter Injection via Calendar Resource Attribute Name
CVE-2026-93638
Zimbra Collaboration Suite Pre-Authentication Reflected Cross-Site Scripting via Login Page zrememberme Parameter
CVE-2026-93639
Zimbra Collaboration Suite Missing Authorization in ConfigureZimlet Enables Delegated Administrator Privilege Escalation
CVE-2026-115786
Zimbra Collaboration Suite Shared-File Mailbox Quota Accounting Error Enables Quota Exhaustion
CVE-2026-93640
Zimbra Collaboration Suite Local Privilege Escalation via Unrestricted zmunbound Sudo Configuration
CVE-2026-93635
Zimbra Collaboration Suite LDAP Filter Injection via Unescaped computeDn() Template Substitution
CVE-2026-93637
Zimbra Collaboration Suite GraphQL Batched Authentication Bypasses Pre-Auth Rate Limiting
CVE-2026-10631
Zimbra Collaboration Suite EWS Extension Authorization Bypass via Crafted Composite Folder/Item Identifier