Zimbra

Critical XSS Vulnerability in Zimbra Collaboration Suite Exploited by Hackers

Cybercrime, News, Risk, Vulnerabilities

May 25, 2025

A critical XSS vulnerability (CVE-2024-27443) has been discovered in Zimbra’s CalendarInvite feature, exploited by the Sednit hacking group. Users are urged to patch their systems urgently.