CVE-2026-93627
Last modified
CVE-2026-93627 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. An organizer authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite (ZCS) allows an unauthenticated sender to cancel or modify an existing meeting in a recipient's calendar. Zimbra accepts iCalendar CANCEL and REQUEST components without verifying that the email sender is authorized to act as the supplied organizer. EPSS estimates a 0.27% chance of exploitation in the next 30 days.
Description
An organizer authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite (ZCS) allows an unauthenticated sender to cancel or modify an existing meeting in a recipient's calendar. Zimbra accepts iCalendar CANCEL and REQUEST components without verifying that the email sender is authorized to act as the supplied organizer. An attacker who knows the meeting UID and organizer address can supply a non-outdated sequence number to move the recipient's meeting to Trash or replace its details. Processing occurs automatically during email delivery without recipient interaction. ZCS 10.1.16 and 10.1.21 are affected.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Zimbra | Zimbra Collaboration Suite | <= 10.1.21 |
References
Timeline
- Published
- Last Modified
- Status
- Undergoing Analysis
Frequently Asked Questions
What is CVE-2026-93627?
How severe is CVE-2026-93627?
How do I fix CVE-2026-93627?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-9362A security vulnerability has been detected in Edimax EW-7438…6.3
- CVE-2026-93620Unauthenticated Broken Access Control in PayPlus Payment Gat…6.5
- CVE-2026-93621Unauthenticated SQL Injection in WP Data Access <= 5.5.84 ve…8.2
- CVE-2026-93622Unauthenticated Cross Site Scripting (XSS) in WPS Limit Logi…7.1
- CVE-2026-93623Unauthenticated Insecure Direct Object References (IDOR) in …5.3
- CVE-2026-93624Shop manager PHP Object Injection in Music Player for WooCom…7.2
- CVE-2026-93628An attendee authentication vulnerability in the email calend…5.3
- CVE-2026-93629An organizer authentication vulnerability in Zimbra Collabor…5.3
- CVE-2026-9363A vulnerability was detected in Edimax EW-7438RPn 1.12. This…6.3
- CVE-2026-93630A hostname canonicalization vulnerability in the email HTML …4.3
- CVE-2026-93631A cross-site request forgery vulnerability in the OAuth exte…7.1
- CVE-2026-93633A CSS sanitization vulnerability in Zimbra Collaboration Sui…5.4
Are you affected by CVE-2026-93627?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST