Zimbra has released Zimbra 9.0.0 Patch 26 and 8.8.15 Patch 33 to address security vulnerabilities (CVE-2022-27925, CVE-2022-37042) in its product. An attacker could exploit these vulnerabilities to trigger remote code execution and authentication bypass on an affected system.

More information on vulnerabilities and updates is available in Zimbra security advisory – zimbra.com.