CVE-2026-33368 | Zimbra Collaboration Suite 10.0/10.1 Webmail REST Interface /h/rest cross site scripting

A vulnerability classified as problematic has been found in Zimbra Collaboration Suite 10.0/10.1. This affects an unknown function of the file /h/rest of the component Webmail REST Interface. The manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-33368. Remote exploitation of the attack is possible. No exploit is available.