Skip to content
OpenAdvisories
Medium WID-SEC-2026-3977 2 CVEs

Synacor Zimbra: Mehrere Schwachstellen

Published Oct 14, 2026 · Updated Oct 14, 2026 · de-DE

Vendor: Synacor Product: Zimbra Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Synacor Zimbra ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.

Product

Zimbra ist eine Groupware-Lösung, die E-Mail, Kalender und Aufgabenverwaltung bietet.

Vulnerabilities 2

  • Medium 5.3
    CVE-2026-93635

    Zimbra Collaboration Suite LDAP Filter Injection via Unescaped computeDn() Template Substitution

    LDAP filter injection in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to alter external LDAP search filters. On domains using search-filter authentication and lazy provisioning, this creates a password oracle for external…

    Zimbra Zimbra Collaboration Suite
  • Low 3.7
    CVE-2026-93637 Public exploit

    Zimbra Collaboration Suite GraphQL Batched Authentication Bypasses Pre-Auth Rate Limiting

    An authentication rate-limit bypass in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to make repeated password guesses through GraphQL without incrementing Zimbra’s source-IP failure counter. GraphQL aliases allow multiple…

    Zimbra Zimbra Collaboration Suite

Revision history

  1. #1

    Initiale Fassung

References