CVEs in the news
Every CVE named in CyberSIXT coverage this week, with its severity, CISA KEV status and exploit probability.
| CVE | Vulnerability | CVSS | Exploitation | EPSS | Articles | Seen |
|---|---|---|---|---|---|---|
| CVE-2026-93638 | Zimbra Collaboration Suite Pre-Authentication Reflected Cross-Site Scripting via Login Page zrememberme ParameterZimbra Collaboration Suite | 6.1Medium | Not in KEV | EPSS 0.2% | 1 article | |
| CVE-2026-93634 | Zimbra Collaboration Suite Cross-Account Authorization Bypass via Forged Shared-File RecordsZimbra Collaboration Suite | 4.3Medium | Not in KEV | EPSS 0.2% | 1 article | |
| CVE-2026-93633 | Zimbra Collaboration Suite Briefcase CSS Sanitization Bypass via Non-ASCII Stylesheet CharactersZimbra Collaboration Suite | 5.4Medium | Not in KEV | EPSS 0.2% | 1 article | |
| CVE-2026-93631 | Zimbra Collaboration Suite OAuth Extension Cross-Site Request Forgery Enables Account LinkingZimbra Collaboration Suite | 7.1High | Not in KEV | EPSS 0.1% | 1 article | |
| CVE-2026-50053 | Zimbra Collaboration Suite RestFilter Request Attribute Override via Unauthenticated URL ParametersZimbra Collaboration Suite | 8.7High | Not in KEV | EPSS 0.3% | 1 article | |
| CVE-2026-10632 | Zimbra Collaboration Suite Classic Web Client Reflected Cross-Site Scripting via Document Editor Packages ParameterZimbra Collaboration Suite | 8.7High | Not in KEV | EPSS 0.3% | 1 article |
No CVE on this page matches. Clear the filter, or search every CVE.
All 6 CVEs in the news this week · 376 exploited CVEs tracked overall.