Organizations Warned of Exploited Zimbra Collaboration Vulnerability

Back Securityweek

Organizations Warned of Exploited Zimbra Collaboration Vulnerability

Securityweek • January 23, 2026

Share: View original

CISA has expanded the KEV list with exploited vulnerabilities in Zimbra, eslint-config-prettier, Versa Concerto, and Vite framework.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Adds Zimbra Vulnerability to KEV Catalog Amid Exploits CISA has added a vulnerability in Zimbra Collaboration to its Known Exploited Vulnerabilities (KEV) list, indicating that it is being actively exploited. This addition also includes vulnerabilities in eslint-config-prettier, Versa Concerto, and the Vite framework, affecting organizations using these technologies. 2 sources 33

Extracted Entities

Platforms (4)

Eslint-config-prettier Versa Concerto Vite Framework Zimbra Collaboration