CVE-2025-27915

Zimbra zero-day reportedly used to target Brazilian military, report says

Cybercrime, News, Risk, Vendors, Vulnerabilities

October 6, 2025

A stored cross-site scripting flaw in Zimbra Collaboration (CVE-2025-27915) was exploited in attacks that targeted the Brazilian military using malicious ICS calendar files, a StrikeReady Labs report said; Zimbra issued patches in January 2025.