CVE-2026-50055

CVE Enrichment

CVSS: 6.5 MEDIUM
EPSS: 0.27%
EPSS Percentile: 18.54%
CISA KEV: Not listed

Description

A policy-enforcement flaw in Zimbra Collaboration Suite allows an authenticated user to bypass disabled mail forwarding by using a Sieve notify action to send copies of email content and headers to an arbitrary address.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: cve@rapid7.com
Published: 09-Oct-2026 00:17
Last Modified: 09-Oct-2026 03:49
EPSS Date: 2026-10-16
CWE: CWE-863

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:L /
                            UI:N /
                            S:U /
                            C:H /
                            I:N /
                            A:N

References

cve@rapid7.com

Last enrichment sync: 17-Oct-2026 11:04
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

and what they can do with the recipient's session. A script can install the Sieve forwarding rule (CVE-2026-50055); another path preserves direct mailbox access after the original session expires or the victim Rapid7 details five Zimbra flaws enabling password guessing, email impersonation, mailbox access and mail exfiltration

CVE (4)

People (1)

MITRE ATT&CK (5)

Vendors (1)

Products (2)

Tools (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.