Stored Cross-Site Scripting Vulnerability in Zimbra Collaboration by Zimbra
CVE-2026-33370
Currently unrated
What is CVE-2026-33370?
A stored cross-site scripting vulnerability was identified in the Zimbra Briefcase feature of Zimbra Collaboration (ZCS) versions 10.0 and 10.1. This issue arises from the inadequate sanitization of uploaded file types, allowing attackers to embed malicious scripts in files shared publicly. When an unsuspecting user opens such a file, the embedded JavaScript can execute within their session context. This exploitation can potentially facilitate unauthorized actions or data exfiltration from the affected user's account.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.