CVE-2026-93634

A cross-account authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to insert forged shared-file records into another user's mailbox through FileSharedWithMeRequest. The request bypasses delegated-account authorization and accepts attacker-selected file metadata, owner identifiers and declared sizes without validating a corresponding document share. An attacker can plant entries attributed to another real local account without that account sharing a document. No victim interaction is required. ZCS 10.1.16 and 10.1.20 are affected.

• CWE-639

• https://wiki.zimbra.com/wiki/Zimbra_Security_AdvisoriesVendor Advisory
• https://www.rapid7.com/blog/post/ve-breaking-zimbra-identity-boundaries-part-1/Exploit, Third Party Advisory

Published

Oct 23, 2026

Last Modified

Oct 28, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-93628An attendee authentication vulnerability in the email calend…5.3
• CVE-2026-93629An organizer authentication vulnerability in Zimbra Collabor…5.3
• CVE-2026-9363A vulnerability was detected in Edimax EW-7438RPn 1.12. This…6.3
• CVE-2026-93630A hostname canonicalization vulnerability in the email HTML …4.3
• CVE-2026-93631A cross-site request forgery vulnerability in the OAuth exte…7.1
• CVE-2026-93633A CSS sanitization vulnerability in Zimbra Collaboration Sui…5.4
• CVE-2026-93635LDAP filter injection in Zimbra Collaboration Suite 10.1.0 t…5.3
• CVE-2026-93636An LDAP filter injection vulnerability in Zimbra Collaborati…4.3
• CVE-2026-93637An authentication rate-limit bypass in Zimbra Collaboration …3.7
• CVE-2026-93638A reflected cross-site scripting vulnerability in the login …6.1
• CVE-2026-93639A missing authorization vulnerability in Zimbra Collaboratio…8.7
• CVE-2026-9364A flaw has been found in projectworlds Online Art Gallery Sh…7.3