{"id":"CVE-2026-50055","published":"2026-10-08T17:17:17.307","lastModified":"2026-10-08T20:49:23.240","description":"A policy-enforcement flaw in Zimbra Collaboration Suite allows an authenticated user to bypass disabled mail forwarding by using a Sieve notify action to send copies of email content and headers to an arbitrary address.","cvssScore":6.5,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-863"],"vendors":[],"products":[],"references":[{"url":"https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}