Email-Security on CuraSechttps://curasec.metacog.co.kr/tags/email-security/Recent content in Email-Security on CuraSecHugoen-usSat, 11 Jul 2026 11:49:48 +0000Critical Stored XSS in Zimbra Classic Web Client Enables Code Executionhttps://curasec.metacog.co.kr/insights/2026-07-11-critical-zimbra-flaw-could-let-crafted-emails-run-malicious/Sat, 11 Jul 2026 11:49:48 +0000https://curasec.metacog.co.kr/insights/2026-07-11-critical-zimbra-flaw-could-let-crafted-emails-run-malicious/<ul> <li><strong>Engineer — Plan:</strong> If you run Zimbra Classic Web Client, apply the vendor-issued update promptly — stored XSS via crafted email is a practical account-takeover vector, but no public PoC or active exploitation is confirmed yet.</li> <li><strong>SOC/IR — Skip</strong></li> <li><strong>Leader — Skip</strong></li> </ul>