Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In Zimbra Collaboration (ZCS) before 10.1.17, a Cross-Site Request Forgery (CSRF) vulnerability exists in the Exchange Web Services (EWS) endpoint of Zimbra Collaboration (ZCS) due to insufficient validation of request content types. An attacker can exploit this vulnerability by causing an authenticated user to submit a crafted request, potentially allowing unauthorized actions to be performed on behalf of the victim.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-73575 In Zimbra Collaboration (ZCS) before 10.1.17, a Cross-Site Request Forgery (CSRF) vulnerability exists in the Exchange Web Services (EWS) endpoint of Zimbra Collabora… https://www.cve.org/CVERecord?id=CVE-2026-73575
Post summary
The text discloses a CSRF vulnerability in Zimbra Collaboration’s EWS endpoint affecting versions prior to 10.1.17.
🚨*CVE* CVE-2026-73575 In Zimbra Collaboration (ZCS) before 10.1.17, a Cross-Site Request Forgery (CSRF) vulnerability exists in the Exchange Web Services (EWS) endpoint of Zimbra Collabora… https://www.cve.org/CVERecord?id=CVE-2026-73575 ----- Traducción: CVE-2026-73575 En … https://infoflow.cloud`
Post summary
A CSRF vulnerability in Zimbra Collaboration’s EWS endpoint (CVE‑2026‑73575) is disclosed, affecting versions prior to 10.1.17, with no mention of patches, exploits, or active attacks.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | synacor | zimbra_collaboration_suite | - | - | - |