← All credits
Jonah Burgess (CryptoCat), Senior Security Researcher, Rapid7
26 vulnerability records and advisories credit this contributor.
CVE-2026-50054
Zimbra Collaboration Suite GrantRightsRequest SOAP Handler Allows Self-Granting of Undocumented loginAs Mailbox Delegation Right
CVE-2026-50055
Zimbra Collaboration Suite Sieve Notify Filter Action Bypasses Mail Forwarding Restriction via Variable Expansion
CVE-2026-93647
Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Crafted Calendar COUNTER Message From Address
CVE-2026-93643
Zimbra Collaboration Suite OnlyOffice Integration Path Traversal Leading to Remote Code Execution via Unauthenticated /downloadas Request
CVE-2026-93641
Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Forged Share Invitation
CVE-2026-93642
Zimbra Collaboration Suite Modern Web Client Stored Cross-Site Scripting via Forged Share Invitation