Zimbra Multiple Vulnerabilities

Multiple vulnerabilities were identified in Zimbra. A remote attacker could exploit some of these vulnerabilities to trigger cross-site scripting, spoofing, security restriction bypass and sensitive information disclosure on the targeted system.

Note:

CVE-2025-68645 is being exploited in the wild. An unauthenticated remote attacker can craft requests to the /h/rest endpoint to influence internal request dispatching, allowing sensitive information disclosure on the targeted system. Hence, the risk level is rated from Medium Risk to High Risk.

CVE-2025-66376 is being exploited in the wild. This vulnerability allows Classic UI stored XSS via Cascading Style Sheets (CSS) @import directives in an HTML e-mail message. Hence, the risk level is rated as High Risk.

[Updated on 2026-01-23]
Updated Description, Risk Level, Vulnerability Identifier and Related Links.

[Updated on 2026-03-19]
Updated Description and Related Links.