CVE-2023-26562: Zimbra Collaboration

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

In Zimbra Collaboration (ZCS) 8.8.15 and 9.0, a closed account (with 2FA and generated passwords) can send e-mail messages when configured for Imap/smtp.

Affected products

• Zimbra Collaboration: version 8.8.15 only; version 9.0.0 only

Published 2024-02-13. Last modified 2026-06-17.