Zimbra Releases Critical Security Update for XSS, XXE, and LDAP Injection Vulnerabilities

Cybersecuritynews

Zimbra Releases Critical Security Update for XSS, XXE, and LDAP Injection Vulnerabilities

First seen 13 Feb 2026, 13:10 UTC • •31.9

Article Content

1 / 3

Browse articles

ThreatCluster •March 12, 2026 at 16:10 UTC

Zimbra has released version 10.1.16 on February 4, 2026, to address high-severity vulnerabilities including cross-site scripting (XSS), XML external entity (XXE), and LDAP injection. Administrators are urged to upgrade immediately to protect their email server deployments from potential exploits.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 228d ago How this analysis works

Timeline

2026-02-04

Zimbra version 10.1.16 released to address vulnerabilities

2026-02-13

Articles published announcing the security update

More articles in this cluster (2)

Threat Graph

4 entities, 3 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

LDAP Injection

Affected Platform (1)

Zimbra

Vulnerability (2)

XSS
XXE

Relationships

XSS targets Zimbra
XXE targets Zimbra
LDAP Injection targets Zimbra

Continue Reading

Critical XSS Vulnerability in SUSE Rancher Exposes Admin Sessions A critical vulnerability (CVE-2026-88804) in SUSE Rancher allows unauthenticated remote attackers to execute stored cross-site scripting (XSS) attacks via public UI settings. This affects Rancher versions 2.15 before 2.15.2, 2.14 before 2.14.6, 2.13 before 2.13.10, 2.12 before 2.12.14, and 2.11 before 2.11.18.…

Multiple WordPress Plugins Face Vulnerabilities Requiring Immediate Updates Three WordPress plugins have been reported with vulnerabilities: the GiveWP plugin (version 4.16.9) has a Cross Site Scripting (XSS) vulnerability, while both the Siteskite (version 2.1.8) and Cartflows (version 3.2.0) plugins have Remote Code Execution (RCE) vulnerabilities. The XSS vulnerability allows attackers to…