> TritonInfoSec News
Home / Jul 12, 2026 / Story
0
#4 The Hacker News general July 11, 2026 at 06:45 UTC

Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions

By [email protected] (The Hacker News)

AI Summary

Zimbra has issued an urgent patch for a critical stored XSS vulnerability in the Zimbra Collaboration Classic Web Client that allows specially crafted emails to execute arbitrary JavaScript in a victim's authenticated session. The flaw has not yet been assigned a CVE and affects organizations relying on the Classic Web Client interface for enterprise email.

Read full article → https://thehackernews.com/2026/07/critical-zimbra-…

Relevance score: 78.0/100

# More from July 12

  1. 1
    Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install The Hacker News
  2. 2
    New U-Boot flaws could enable stealthy firmware attacks BleepingComputer
  3. 3
    Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages The Hacker News
  4. 5
    ‘HalluSquatting’ Turns AI Hallucinations Into Botnet Delivery Mechanism SecurityWeek
  5. 6
    'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets BleepingComputer
  6. 7
    Former ransomware negotiator gets 4 years for BlackCat attacks BleepingComputer
  7. 8
    Unpatched XRING Flaw in XQUIC Lets Remote Clients Crash HTTP/3 Servers The Hacker News
  8. 9
    Laser Attack Resets Tangem Wallet Passwords on Cards That Can't Be Patched The Hacker News
  9. 10
    Network of 200 GitHub Repositories Used for Malware Infection SecurityWeek