Skip to content
Sign in

Zimbra product

Collaboration Suite

Alert
No Collaboration Suite CVE is in the CISA KEV catalogue.

Tracked since 27 Oct · latest article 27 Oct · RSS · API

0Open KEV deadlines

None open

0Added to KEV · 90 days

of 0 in the full CISA catalogue · all time

0High exploit odds · current

EPSS top 5%, not in KEV

1Articles · 7 days

usual rate

Exploited, by due date

No Collaboration Suite CVE is in the CISA KEV catalogue.

Patch cadence and exploit odds

How often CISA adds Collaboration Suite CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

CISA has not added a Collaboration Suite CVE to KEV.

Fix listed

6 of 6 CVEs in coverage

Every CVE in coverage has a fix recorded.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2026-50053: 22.7th percentileCVE-2026-10632: 22.7th percentileCVE-2026-93634: 12.6th percentileCVE-2026-93638: 11.2th percentileCVE-2026-93633: 6.7th percentileCVE-2026-93631: 3.7th percentile050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2026-5005322.7
CVE-2026-1063222.7
CVE-2026-9363412.6
CVE-2026-9363811.2
CVE-2026-936336.7
CVE-2026-936313.7

Coverage1 article · all time

The latest article naming Collaboration Suite, in the shared story grammar.

Full timeline
Developinglatest 2 hours ago1 article1 outlet

1 article from 1 outlet since 27 Oct. Still developing; the latest report was 2 hours ago.

Now27 OctFirst reportSecurityOnline · 27 Oct, 02:01
  • Tue 27 Oct, 02:01 UTC. SecurityOnline, first report. Rapid7 Discloses 17 Flaws in Zimbra Collaboration Suite.
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
Show all 1 articles as a list
  1. Tue 27 OctDay 01
    1. Rapid7 Discloses 17 Flaws in Zimbra Collaboration Suite02:01 · SecurityOnline · First report

All CVEs in coverage6

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2026-50053

    Zimbra Collaboration Suite RestFilter Request Attribute Override via Unauthenticated URL Parameters

    8.7High0.3% EPSS · 1 article
  • CVE-2026-10632

    Zimbra Collaboration Suite Classic Web Client Reflected Cross-Site Scripting via Document Editor Packages Parameter

    8.7High0.3% EPSS · 1 article
  • CVE-2026-93634

    Zimbra Collaboration Suite Cross-Account Authorization Bypass via Forged Shared-File Records

    4.3Medium0.2% EPSS · 1 article
  • CVE-2026-93638

    Zimbra Collaboration Suite Pre-Authentication Reflected Cross-Site Scripting via Login Page zrememberme Parameter

    6.1Medium0.2% EPSS · 1 article
  • CVE-2026-93633

    Zimbra Collaboration Suite Briefcase CSS Sanitization Bypass via Non-ASCII Stylesheet Characters

    5.4Medium0.2% EPSS · 1 article
  • CVE-2026-93631

    Zimbra Collaboration Suite OAuth Extension Cross-Site Request Forgery Enables Account Linking

    7.1High0.1% EPSS · 1 article
CyberSIXTSignal over noise
Updated AboutDevelopersSign in