THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-73571 (LOW 3.1) — An authorization bypass vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to impersonate another user and send ema

[NVD] CVE-2026-73571 (LOW 3.1) — An authorization bypass vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to impersonate another user and send ema

mednvdPublished 2026-08-13

CVE-2026-73571 CVSS: 3.1 LOW Published: 2026-08-13T16:19:06.150

An authorization bypass vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to impersonate another user and send emails without possessing the required delegation or send-

Indicators of compromise

CVE-2026-73571cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-73571