Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-73571

An authorization bypass vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to impersonate another user and send emails without possessing the required delegation or send-as permissions. This occurs in the SaveDraftRequest SOAP handler.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 4.9%
CVSS Severity
CVSS v3 Score 3.1
Products affected by CVE-2026-73571


Contact Us

Shodan ® - All rights reserved