01 Record

CVE-2026-73571

An authorization bypass vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker

LowPUBLISHEDCNA: mitre

Base score3.1 CVSS v3.xCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

View raw JSON CVE Program record

02 Description

An authorization bypass vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker

03 Metadata

Published: 2026-08-13 15:20Z1 DAY AGO
Last updated: 2026-08-13 15:57Z1 DAY AGO
Reserved: 2026-08-12
Assigning CNA: mitre
Record state: PUBLISHED
Severity: Low (CVSS 3.1)
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
Weaknesses: CWE-863
SSVC decision: ExploitationnoneAutomatablenoTechnical Impactpartial
Data version: 5.2
Document digest: 1bfde8d58943b3214a6af7e0bf09d263f5926f1b96d1b4e852f2038d5760a10b

04 Affected products

VendorProductVersionsPlatforms

ZimbraCollaboration0 to < 10.1.17—

05 References

wiki.zimbra.comhttps://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
wiki.zimbra.comhttps://wiki.zimbra.com/wiki/Security_Center

01 Record