CISA Orders Federal Patch for XSS in Zimbra Collaboration Suite

CISA directed federal agencies to patch an actively exploited stored XSS vulnerability in Zimbra Collaboration Suite (CVE-2025-66376).

Part of the PlainSec briefing for 2026-03-25

Sources