{"vulnerability": "cve-2026-9364", "sightings": [{"uuid": "740b521c-031f-4bcc-aaa7-ac16836bbc34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93641", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/67yohrbb3qr34", "content": "CVE-2026-93641 - Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Forged Share Invitation\nCVE ID : CVE-2026-93641\n \n Published : Sept. 25, 2026, 1:55 p.m. | 10\u00a0minutes ago\n \n Description : An unauthenticated sender can forge a share notification th...", "creation_timestamp": "2026-09-25T15:37:00.348376Z"}, {"uuid": "83b531d1-9720-4b5a-9272-fc13de1afd4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93642", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwe5p2b5m22i", "content": "\ud83d\udea8 CVE-2026-93642 \u2014 CVSS 9.3 CRITICAL\n\nAn unauthenticated sender can forge a share notification that triggers stored XSS when a signed-in Zimbra M...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93642\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-25T16:07:34.265369Z"}, {"uuid": "ad0739c9-67d3-4554-a5f8-7a7cfe405fb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93641", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwe5os2myo2n", "content": "\ud83d\udea8 CVE-2026-93641 \u2014 CVSS 9.3 CRITICAL\n\nAn unauthenticated sender can forge a share notification that triggers stored XSS when a signed-in Zimbra C...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93641\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-25T16:07:25.577391Z"}, {"uuid": "a9143488-2296-40bf-8c5e-9dd225bb7609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93643", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwe5pcffdm2r", "content": "\ud83d\udea8 CVE-2026-93643 \u2014 CVSS 9.8 CRITICAL\n\nWhen OnlyOffice/Document Editing is available, an unauthenticated remote attacker with access to an existin...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93643\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-25T16:07:42.675957Z"}, {"uuid": "9c3bc989-1b2f-4dd5-b3aa-616a95806e89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93647", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwe5pkvemp2r", "content": "\ud83d\udea8 CVE-2026-93647 \u2014 CVSS 9.3 CRITICAL\n\nAn unauthenticated calendar sender can place active markup in a COUNTER message's RFC\u00a0From\u00a0address. Selecti...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93647\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-25T16:07:51.562654Z"}, {"uuid": "352b0387-87fe-4db9-a260-181c4f1f5ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93643", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwggi4m6ah2f", "content": "CVE-2026-93643 - zimbra collaboration suite (zcs)\nIf Zimbra\u2019s OnlyOffice document feature is enabled, a remote attacker who can view a public document can trick the system into writing files to any location and then\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#zimbra #CVE #infosec", "creation_timestamp": "2026-09-26T13:50:05.346588Z"}, {"uuid": "640a6de9-985f-4780-95ed-26e018e9a335", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93647", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwggzyqxci2r", "content": "CVE-2026-93647 - zimbra collaboration suite (zcs)\nAnyone can send a specially crafted calendar invitation that contains hidden code in the From address. When a user opens that invitation in the Zimbra Classic web\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#zimbra #CVE #infosec", "creation_timestamp": "2026-09-26T14:00:05.065528Z"}, {"uuid": "93364f78-9cb7-46eb-be6d-2e5750d11a8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93641", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwghlue7mi2r", "content": "CVE-2026-93641 - zimbra collaboration suite (zcs)\nA malicious sender can create a fake share invitation that, when a logged\u2011in Zimbra Classic user clicks \"Accept Share,\" runs hidden code in the user's browser. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#zimbra #CVE #infosec", "creation_timestamp": "2026-09-26T14:10:04.618775Z"}, {"uuid": "0845a54b-8dc9-4300-8f13-dc2f4ef4797d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93642", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwghlvoi6s2n", "content": "CVE-2026-93642 - zimbra collaboration suite (zcs)\nA fake share invitation can be sent to a Zimbra user who is logged in. When the user clicks the invitation, hidden code runs and the attacker can view the user's email\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#zimbra #CVE #infosec", "creation_timestamp": "2026-09-26T14:10:07.682346Z"}, {"uuid": "cf6c4094-9c7f-4401-ac81-302fc5da3972", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-93642", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-zimbra-collaboration-suite", "content": "", "creation_timestamp": "2026-09-28T00:22:27.000000Z"}, {"uuid": "0735235c-c337-47c5-b30b-a0636f36334a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-93643", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-zimbra-collaboration-suite", "content": "", "creation_timestamp": "2026-09-28T00:22:27.000000Z"}, {"uuid": "899adabb-488d-44d6-867e-64350b0b3ce6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-93647", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-zimbra-collaboration-suite", "content": "", "creation_timestamp": "2026-09-28T00:22:27.000000Z"}, {"uuid": "f83b08c0-0eac-4c8f-bc5a-22f39df9736f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-93641", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-zimbra-collaboration-suite", "content": "", "creation_timestamp": "2026-09-28T00:22:27.000000Z"}]}