Zimbra urges customers to patch critical web client XSS flaw

Bleepingcomputer

Zimbra urges customers to patch critical web client XSS flaw

First seen 10 Jul 2026, 13:43 UTC • Heise.De

Heise.De

Bleepingcomputer

Securityaffairs.Co

Scworld

Thehackernews

+11 •89% similarity •40.9

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

New cluster - AI summary will be generated shortly

ThreatCluster AI

Attack Flow

15 entities, 20 inferred relationships (STIX 2.1).

Threat Actor (1)

Laundry Bear

Technique (5)

Data Breach
Phishing
T1041 - Exfiltration Over C2 Channel
T1059.007 - JavaScript
T1566 - Phishing

Vulnerability (3)

CVE-2025-48700
CVE-2025-66376
XSS

Weakness (1)

Cwe-79 - Cross-site Scripting (xss)

Indicator (2)

entities.in
german.it

Affected Platform (3)

OpenClaw
Microsoft Exchange
Zimbra Collaboration Suite

Relationships

Laundry Bear uses Data Breach
Laundry Bear uses Phishing
Laundry Bear uses T1041 - Exfiltration Over C2 Channel
Laundry Bear uses T1059.007 - JavaScript
Laundry Bear uses T1566 - Phishing
Laundry Bear exploits CVE-2025-48700
Laundry Bear exploits CVE-2025-66376
Laundry Bear exploits XSS
CVE-2025-48700 targets OpenClaw
CVE-2025-48700 targets Microsoft Exchange
CVE-2025-48700 targets Zimbra Collaboration Suite
CVE-2025-66376 targets OpenClaw
CVE-2025-66376 targets Microsoft Exchange
CVE-2025-66376 targets Zimbra Collaboration Suite
XSS targets OpenClaw
XSS targets Microsoft Exchange
XSS targets Zimbra Collaboration Suite
Laundry Bear related to Cwe-79 - Cross-site Scripting (xss)
Laundry Bear related to entities.in
Laundry Bear related to german.it

Community

Browse all →

Tracked Entities in This Story

Laundry Bear OpenClaw Microsoft Exchange Zimbra Collaboration Suite Government Data Breach Phishing