Path Traversal Vulnerability in OnlyOffice/Document Editing for Zimbra
CVE-2026-93643

9.8CRITICAL

Key Information:

Vendor

Zimbra

Status
Zimbra Collaboration Suite (zcs)
Vendor
CVE Published:
25 September 2026

What is CVE-2026-93643?

An unauthenticated remote attacker can exploit a vulnerability in OnlyOffice/Document Editing when exposed through public access on Zimbra's Briefcase documents. By manipulating unsigned save fields, the attacker can perform path traversal writes, leading to unauthorized command execution under the Zimbra application's permissions. It is recommended that users apply security updates and restrict public access to sensitive document types to mitigate this vulnerability.

Affected Version(s)

Zimbra Collaboration Suite (ZCS) 0 < 10.1.21

References

https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
vendor-advisory

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jonah Burgess (CryptoCat), Senior Security Researcher, Rapid7
.