Zimbra Zimbra Collaboration Suite (ZCS)

• CVE-2026-93647 Critical 9.3 Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Crafted Calendar COUNTER Message From Address 0.2%
• CVE-2026-93643 Critical 9.8 Zimbra Collaboration Suite OnlyOffice Integration Path Traversal Leading to Remote Code Execution via Unauthenticated /downloadas Request 1.0%
• CVE-2026-93642 Critical 9.3 Zimbra Collaboration Suite Modern Web Client Stored Cross-Site Scripting via Forged Share Invitation 0.2%
• CVE-2026-93641 Critical 9.3 Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Forged Share Invitation 0.3%