NEWS
Critical Zimbra Flaw Lets Crafted Emails Run Code in User Sessions
Zimbra 10.1.19 patches a critical stored XSS in the Classic Web Client that can execute malicious scripts when a victim opens a crafted email.
Jul 11, 2026 4 min read High Severity