InfoSecBulletin Cybersecurity for mankind
Zimbra launched version 10.1.16 addressing serious vulnerabilities like cross-site scripting (XSS), XML external entity (XXE), and LDAP injection. This urgent update, marked as high risk for patch severity and deployment, requires admins to upgrade right away to protect against exploits.
Attackers can use unsanitized inputs to insert harmful scripts, which could steal user sessions or data.
Meta’s louisiana data center to exceed 250 billion price tag
Ransomware Crisis in 2026: 5,064 Organizations Affected in 135 Countries
Palo Alto Networks Addresses 13 Vulnerabilities
Critical Dell BIOS & Zimbra Flaws Expose Enterprise Systems
CoLoCity Launches New 1.0 MW Data Center Facility at Gulshan
Daily Cyber security update for 10. 07. 2026
How Hacker Compromise AWS Cloud Environment Using AI in 72 Hours
Mycelium Framework: First AI-as-a-Service Botnet
CrowdStrike Shows 5 New Prompt Injection Techniques for AI Agents
Critical GCP Dialogflow Vulnerability Allows Malicious Code Injection
| Vulnerability | CVE Status | Impact | Fix Summary |
|---|---|---|---|
| XSS in Webmail/Briefcase | Pending | Session hijacking, data theft | Improved input validation & encoding |
| XXE in EWS SOAP | Pending | File disclosure, DoS, SSRF | Disabled external entity processing |
| LDAP Injection | Pending | Privilege escalation, data leak | Strengthened query sanitization |
Zimbra 10.1.16 improves Backup & Restore with 50% faster performance and 45% less storage through Zstandard compression and deduplication for S3.
Modern Web App adds email translation (Chrome only), smarter search, custom tag colors, and Zoom integration. Ubuntu 24 beta support is also available, but it’s not suitable for production.
More than 20 bug fixes for ActiveSync, EWS, Chat, and Zimbra Desktop enhance stability, with detailed release notes and admin guides available.
This patch highlights the importance of quick updates in cybersecurity. Delayed patches can lead to breaches, while Zimbra’s fast action is a good example.
