A vulnerability marked as problematic has been reported in Zimbra Collaboration Suite 10.0/10.1. The affected element is an unknown function of the component Request Header Handler. Performing a manipulation results in cross-site request forgery.

This vulnerability was named CVE-2026-33372. The attack may be initiated remotely. There is no available exploit.