Detections
Analytics
CVE-2026-10631
high
Description
The vulnerability exists due to an access control verification defect within the Exchange Web Services extension component, which enables authenticated software users to exceed their intended operational privileges and access restricted server management modules.
References
https://www.securityweek.com/zimbra-update-patches-critical-vulnerabilities/