Threats affecting pkg:maven/com.zimbra/zimbra-collaboration-suite

CVE-2026-115786 is a mailbox quota-accounting vulnerability in Zimbra Collaboration Suite versions up to 10.1.20. An authenticated user can exploit this flaw by repeatedly sharing and revoking a document with another user, causing the recipient's mailbox quota usage to increase incorrectly. This happens because revoking the share reverses folder counters but does not reverse the mailbox-wide quota charge, leading to quota consumption without visible records. On accounts with limited quota, this can block incoming mail and other operations that increase mailbox size.

CVE-2026-93630 is a hostname canonicalization vulnerability in Zimbra Collaboration Suite's email HTML sanitizers. It allows an unauthenticated sender to bypass restrictions on form actions targeting the Zimbra host by exploiting improper validation order before canonicalization. This enables crafted emails to submit authenticated form requests when opened by recipients in Classic mode. The vulnerability affects versions prior to 10.1.21 and does not bypass CSRF-token protections.

CVE-2026-50053 is a vulnerability in Zimbra Collaboration Suite (ZCS) affecting versions up to and including 10.1.17. It allows unauthenticated requests to override servlet request attributes intended for trusted internal dispatch, enabling an attacker to manipulate authentication tokens and document identifiers. This flaw can be combined with CVE-2026-10632 in ZCS 10.1.16 to execute JavaScript in another user's signed-in browser session. Although ZCS 10.1.17 mitigates the XSS chain by changing the document renderer, it still retains the request attribute override vulnerability.

CVE-2026-93637 is a low-severity vulnerability in Zimbra Collaboration Suite versions up to 10.1.21. It involves an authentication rate-limit bypass via GraphQL aliases, allowing unauthenticated attackers to perform multiple password guesses in a single HTTP request without incrementing the source-IP failure counter.

CVE-2026-93642 is a critical stored cross-site scripting (XSS) vulnerability in Zimbra Collaboration Suite (ZCS). An unauthenticated attacker can forge a share notification that triggers stored XSS when a signed-in user clicks Accept Share. This allows the attacker to access mailbox data and act on behalf of the victim user.