InfoSecBulletin Cybersecurity for mankind
Zimbra launched version 10.1.16 addressing serious vulnerabilities like cross-site scripting (XSS), XML external entity (XXE), and LDAP injection. This urgent update, marked as high risk for patch severity and deployment, requires admins to upgrade right away to protect against exploits.
Attackers can use unsanitized inputs to insert harmful scripts, which could steal user sessions or data.
Brazilian health surveillance platform breach exposes 100K+ sensitive documents
Thousands of data centers are at risk of compromise due to a 22-year-old flaw
Bangladesh Launches (CIRS) and National ICT & Cyber Security Rating System (NRS)
CVE-2026-18574
Check Point Authentication Bypass Hits Management Server
TP-Link RCE and SonicWall Zero-Click Flaws Enable Complete Device Compromise
ExfilSquad releases info of over 100,000 UK police officers, staff
CISA alerts to cyberattacks affecting U.S. water utilities
“CyberStrike” AI-Driven Security Platform for Automated Testing
AIDCQ Propose to invest $2 billion in AI data center in Bangladesh
NVIDIA BlueField Flaw Enables Code Execution Attacks
| Vulnerability | CVE Status | Impact | Fix Summary |
|---|---|---|---|
| XSS in Webmail/Briefcase | Pending | Session hijacking, data theft | Improved input validation & encoding |
| XXE in EWS SOAP | Pending | File disclosure, DoS, SSRF | Disabled external entity processing |
| LDAP Injection | Pending | Privilege escalation, data leak | Strengthened query sanitization |
Zimbra 10.1.16 improves Backup & Restore with 50% faster performance and 45% less storage through Zstandard compression and deduplication for S3.
Modern Web App adds email translation (Chrome only), smarter search, custom tag colors, and Zoom integration. Ubuntu 24 beta support is also available, but it’s not suitable for production.
More than 20 bug fixes for ActiveSync, EWS, Chat, and Zimbra Desktop enhance stability, with detailed release notes and admin guides available.
This patch highlights the importance of quick updates in cybersecurity. Delayed patches can lead to breaches, while Zimbra’s fast action is a good example.
