HIGH 7.1 NVD

CVE-2026-50054

An authorization flaw in Zimbra Collaboration Suite’s GrantRightsRequest allows an attacker with access to an authenticated account to grant another local accou

An authorization flaw in Zimbra Collaboration Suite’s GrantRightsRequest allows an attacker with access to an authenticated account to grant another local account the loginAs right, creating persistent mailbox access and mail-sending authority that survives password changes and session expiry.

References

https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories

Published: 2026-10-08 · Source: NVD · Feed updated: 2026-10-12

This high severity vulnerability with a CVSS score of 7.1 was published on 2026-10-08 via NVD.

vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.