CVE-2026-93641
Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Forged Share Invitation
CVSS score
9.3
EPSS probability
%0.3
Risk score
0.0
Published
20 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.9
CVE-2026-73570 Actively exploited
OS command injection in Zimbra Collaboration
Z
Patch status unknown Public Exploits:1EPSS %72
5.3
CVE-2026-93635
Zimbra Collaboration Suite LDAP Filter Injection via Unescaped computeDn() Template Substitution
Z
Patch status unknown
3.7
CVE-2026-93637
Zimbra Collaboration Suite GraphQL Batched Authentication Bypasses Pre-Auth Rate Limiting
Z
Patch status unknown
9.8
CVE-2026-93643
Zimbra Collaboration Suite OnlyOffice Integration Path Traversal Leading to Remote Code Execution via Unauthenticated /downloadas Request
Z
Patch status unknownEPSS %1
9.3
CVE-2026-93647
Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Crafted Calendar COUNTER Message From Address
Z
Patch status unknownEPSS %0
9.3
CVE-2026-93642
Zimbra Collaboration Suite Modern Web Client Stored Cross-Site Scripting via Forged Share Invitation
Z
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-93641"