CVE-2026-50055: Zimbra Collaboration Suite

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A policy-enforcement flaw in Zimbra Collaboration Suite allows an authenticated user to bypass disabled mail forwarding by using a Sieve notify action to send copies of email content and headers to an arbitrary address.

Affected products

• Zimbra Zimbra Collaboration Suite: before 10.1.20 (fixed in 10.1.20)

Published 2026-10-08. Last modified 2026-10-08.