importantSYS.SOURCE: The Hacker News• 2026-07-11T12:15:55+05:30

Critical Stored XSS Vulnerability in Zimbra Classic Web Client Allows Session Hijacking

#xss #email security #zimbra #session hijacking #cybersecurity

A critical stored cross-site scripting (XSS) vulnerability in Zimbra's Classic Web Client allows attackers to execute malicious code via crafted emails, risking session hijacking and data exposure. Zimbra urges users to update to version 10.1.19 to mitigate the threat.

Zimbra is urging customers to apply updates to address a critical security vulnerability impacting the Classic Web Client that could result in arbitrary code execution.

The vulnerability has been described as a case of stored cross-site scripting (XSS) that could allow specially crafted emails to execute malicious scripts in a user's session. It has yet to be assigned a CVE identifier.

"The

Read original article

*** END OF TRANSMISSION ***

> OPTIMIZING LLM OUTPUT EFFICIENCY THROUGH HISTORICAL TELEGRAPHESE COMPRESSION TECHNIQUES > CISO INSIGHTS REVEAL CYBER RISK SHIFTS TOWARD INTERNAL WORKFLOWS > FBI WARNS OF ONGOING FORTIBLEED CAMPAIGN TARGETING FORTINET DEVICES WITH 86,644 CREDENTIALS COMPROMISED > CRITICAL ATLASSIAN DATA CENTER VULNERABILITY CVE-2026-21589 EXPLOITED WITHIN TWO HOURS OF DISCLOSURE > AGENTIC PENTESTING: PROOFS, LIMITATIONS, AND CONTINUOUS VALIDATION CHALLENGES > CHROME INTEGRATES JPEG XL FOR ENHANCED IMAGE COMPRESSION > EXPLOITING LARGE LANGUAGE MODELS AND DATA POISONING TO MANIPULATE CONSENSUS > ADVANCEMENTS IN SYNTHETIC BIOLOGY ENABLE CREATION OF MIRROR-LIFE ORGANISMS > CANADIAN STUDY WARNS PERMANENT DAYLIGHT SAVING TIME POSES RISKS TO SLEEP AND MENTAL HEALTH > RISING PS5 JAILBREAKS POSE SIGNIFICANT SECURITY CHALLENGES> OPTIMIZING LLM OUTPUT EFFICIENCY THROUGH HISTORICAL TELEGRAPHESE COMPRESSION TECHNIQUES > CISO INSIGHTS REVEAL CYBER RISK SHIFTS TOWARD INTERNAL WORKFLOWS > FBI WARNS OF ONGOING FORTIBLEED CAMPAIGN TARGETING FORTINET DEVICES WITH 86,644 CREDENTIALS COMPROMISED > CRITICAL ATLASSIAN DATA CENTER VULNERABILITY CVE-2026-21589 EXPLOITED WITHIN TWO HOURS OF DISCLOSURE > AGENTIC PENTESTING: PROOFS, LIMITATIONS, AND CONTINUOUS VALIDATION CHALLENGES > CHROME INTEGRATES JPEG XL FOR ENHANCED IMAGE COMPRESSION > EXPLOITING LARGE LANGUAGE MODELS AND DATA POISONING TO MANIPULATE CONSENSUS > ADVANCEMENTS IN SYNTHETIC BIOLOGY ENABLE CREATION OF MIRROR-LIFE ORGANISMS > CANADIAN STUDY WARNS PERMANENT DAYLIGHT SAVING TIME POSES RISKS TO SLEEP AND MENTAL HEALTH > RISING PS5 JAILBREAKS POSE SIGNIFICANT SECURITY CHALLENGES