CVE-2026-73575

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration (ZCS) versions prior to 10.1.17

Description A Cross-Site Request Forgery (CSRF) issue exists due to insufficient validation of request content types. This allows an attacker to trick an authenticated user into submitting a crafted request to the 'Exchange Web Services (EWS)' endpoint, potentially leading to unauthorized actions performed on behalf of the victim. CSRF is a type of attack that forces an authenticated user to execute unwanted actions on a web application.

Recommendations Update Zimbra Collaboration (ZCS) to version 10.1.17 or later.