THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-73575 (LOW 3.1) — In Zimbra Collaboration (ZCS) before 10.1.17, a Cross-Site Request Forgery (CSRF) vulnerability exists in the Exchange Web Services (EWS) endpoint of Zimbra Collaboration (ZCS) due to insufficient validation of request content types. An attacker can exploit this vulnerability by

[NVD] CVE-2026-73575 (LOW 3.1) — In Zimbra Collaboration (ZCS) before 10.1.17, a Cross-Site Request Forgery (CSRF) vulnerability exists in the Exchange Web Services (EWS) endpoint of Zimbra Collaboration (ZCS) due to insufficient validation of request content types. An attacker can exploit this vulnerability by

mednvdPublished 2026-08-13

CVE-2026-73575 CVSS: 3.1 LOW Published: 2026-08-13T16:19:06.767

In Zimbra Collaboration (ZCS) before 10.1.17, a Cross-Site Request Forgery (CSRF) vulnerability exists in the Exchange Web Services (EWS) endpoint of Zimbra Collaboration (ZCS) due to insufficient validation of request content types. An attacker can exploit this vulnerability by causing an authenticated user to submit a crafted reque

MITRE ATT&CK techniques

Web ServicesT1583.006
Web ServicesT1584.006

Indicators of compromise

CVE-2026-73575cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-73575