Over 10,000 Zimbra servers vulnerable to ongoing XSS attacks

Published on April 24, 2026

Over 10,000 Zimbra Collaboration Suite (ZCS) instances exposed online are vulnerable to ongoing attacks exploiting a cross-site scripting (XSS) security flaw. [...]