InfoSecBulletin Cybersecurity for mankind
Zimbra has launched updates to fix serious security flaws, including a command injection bug in the SNMP monitoring part. As many as nine security flaws have been fixed in Zimbra 10.1.20. The biggest issue is a command injection problem in the SNMP monitoring part when SNMP alerts are turned on.
Also patched are four cross-site scripting (XSS) flaws in the Classic Web Client:
Japan banking crisis
Outage causes disruption at 128 japan banks: preventing ATM transaction
Daily Cyber security update for 06.11. 2026
Cyber attack causes French bank Credit Mutuel Arkea €100 million missing
OpenAI AI Pipeline Discovers 948 Linux Kernel Privilege Escalation Flaws in 30 Hours
Bangladeshi Researcher Rasel Earns First Apple CVE Recognition for Model I/O Flaw
WinRAR, WordPress RCE flaw & Zyxel GS1900 Zero-Day exploited in the wild
Daily Cyber security update for 04.11. 2026
Daily Cyber security update for 03.11. 2026
Using ARTEX AI, Hacker to attack 200 Organizations Across 14 Countries
Amadeus cyber incident impacted “Cathay Pacific, Qantas, Japan, Malaysia, Korean & Asiana” Airlines
A stored cross-site scripting (XSS) vulnerability that could allow malicious attachment filenames to execute script under specific conditions.
An XSS vulnerability where crafted fields could execute a malicious script under specific conditions.
An XSS vulnerability where a crafted field could execute a malicious script when rendered.
An XSS vulnerability where crafted attachments could execute a malicious script when rendered.
Fixes have come out for a flaw that lets users get around mail forwarding limits (CVE-2026-50055). This could let logged-in users steal emails even when mail forwarding is turned on. Jonah Burgess from Rapid7 found and reported this issue.
The company did not share any additional specifics, stating “in line with industry best practices, information disclosure is limited for security vulnerability fixes.”
The release comes a little over a week after Zimbra fixed a serious stored XSS problem in the Classic Web Client that could let attackers run any code.
None of the known problems have been marked as used right now, but bad people have often used XSS bugs in the email software before. It is very important for customers to install the updates to stay safe.
