{"vulnerability": "CVE-2026-93641", "sightings": [{"uuid": "740b521c-031f-4bcc-aaa7-ac16836bbc34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93641", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/67yohrbb3qr34", "content": "CVE-2026-93641 - Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Forged Share Invitation\nCVE ID : CVE-2026-93641\n \n Published : Sept. 25, 2026, 1:55 p.m. | 10\u00a0minutes ago\n \n Description : An unauthenticated sender can forge a share notification th...", "creation_timestamp": "2026-09-25T15:37:00.348376Z"}, {"uuid": "ad0739c9-67d3-4554-a5f8-7a7cfe405fb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93641", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwe5os2myo2n", "content": "\ud83d\udea8 CVE-2026-93641 \u2014 CVSS 9.3 CRITICAL\n\nAn unauthenticated sender can forge a share notification that triggers stored XSS when a signed-in Zimbra C...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93641\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-25T16:07:25.577391Z"}, {"uuid": "93364f78-9cb7-46eb-be6d-2e5750d11a8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93641", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwghlue7mi2r", "content": "CVE-2026-93641 - zimbra collaboration suite (zcs)\nA malicious sender can create a fake share invitation that, when a logged\u2011in Zimbra Classic user clicks \"Accept Share,\" runs hidden code in the user's browser. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#zimbra #CVE #infosec", "creation_timestamp": "2026-09-26T14:10:04.618775Z"}]}