high·Product Based Web Vulnerabilities·Updated Oct 8, 2026

Zimbra Collaboration Suite 8.8.15/9.0 - Zip Path Traversal

Est. Time~10 seconds

Scan TypeGroup Scan

Targetsurl

CostFree

Times Used

continuous scan runs

Continuously Checked

assets under CS

Vulnerabilities Found

confirmed findings

References

github.com↗

🔴

CISA Known Exploited Vulnerability

This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.

CVECVE-2022-27925

7.2

CVSShigh

Exploitable remotely over the internet · requires high privileges.

Description

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal.

Attack Vector

Network

Privileges Req.

High

User Interaction

None

Affected

n/aby n/a

n/a

Updated Nov 10, 2026View on NVD →

Similar Tools

Check your infrastructure.
Right now.

12,000+ scanners. Free to start. No credit card required.

Zimbra Collaboration Suite 8.8.15/9.0 - Zip Path Traversal

Check your infrastructure.Right now.

Check your infrastructure.
Right now.