01 Record

CVE-2026-73576

In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability exists in the OnlyOffice integration. The zimbraDocumentEditingJwtSecret is generated using an insecure

MediumPUBLISHEDCNA: mitre

Base score6.3 CVSS v3.xCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N

View raw JSON CVE Program record

02 Description

In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability exists in the OnlyOffice integration. The zimbraDocumentEditingJwtSecret is generated using an insecure

03 Metadata

Published: 2026-08-13 15:26Z1 DAY AGO
Last updated: 2026-08-13 15:58Z1 DAY AGO
Reserved: 2026-08-12
Assigning CNA: mitre
Record state: PUBLISHED
Severity: Medium (CVSS 6.3)
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N
Weaknesses: CWE-1241
SSVC decision: ExploitationnoneAutomatablenoTechnical Impactpartial
Data version: 5.2
Document digest: ee0c086968081ca59aa1130648f9fd5aa477775f323e50799e287e444a1065f9

04 Affected products

VendorProductVersionsPlatforms

ZimbraCollaboration0 to < 10.1.17—

05 References

wiki.zimbra.comhttps://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
wiki.zimbra.comhttps://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy