Zimbra has rolled out patches for several critical-severity vulnerabilities, including command injection, XSS, and SSRF flaws.

Zimbra has rolled out patches for several critical-severity vulnerabilities, including command injection, XSS, and SSRF flaws.

Zimbra 10.1.20 fixes nine flaws, including SNMP command injection and CVE-2026-50055, which could enable email exfiltration.