Product
Zimbra Webmail
- First Reported
- Jul 15, 2026
- Latest Reported
- Jul 15, 2026
Reported Context (1)
- The XSS exploit is embedded directly in the HTML body of the message and fires as soon as the victim opens or previews it in the vulnerable Zimbra webmail client. TA488 Used Zimbra XSS Flaw to Steal Emails and Maintain Access
CVE (1)
Malware (1)
People (1)
Threat Actors (3)
MITRE ATT&CK (7)
Products (1)
Industries (6)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.