Low severity3.7NVD Advisory· Published Oct 14, 2026
CVE-2026-93637
CVE-2026-93637
Description
An authentication rate-limit bypass in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to make repeated password guesses through GraphQL without incrementing Zimbra’s source-IP failure counter. GraphQL aliases allow multiple authentication attempts in one HTTP request.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 10.1.0 - 10.1.21
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.