Product
Zimbra Collaboration (ZCS)
- First Reported
- Mar 20, 2026
- Latest Reported
- Mar 20, 2026
Reported Context (1)
- The campaign exploits CVE-2025-66376, a stored cross-site scripting (XSS) vulnerability in Zimbra Collaboration (ZCS). Operation GhostMail Uses Zero-Click XSS to Target Ukrainian Government Webmail
CVE (1)
Threat Actors (1)
Industries (1)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.