Low severity3.1NVD Advisory· Published Aug 13, 2026· Updated Aug 28, 2026
CVE-2026-73571
CVE-2026-73571
Description
An authorization bypass vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to impersonate another user and send emails without possessing the required delegation or send-as permissions. This occurs in the SaveDraftRequest SOAP handler.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <10.1.17
Patches
Vulnerability mechanics
References
2- wiki.zimbra.com/wiki/Security_CenternvdVendor Advisory
- wiki.zimbra.com/wiki/Zimbra_Security_AdvisoriesnvdVendor Advisory
News mentions
0No linked articles in our index yet.