News Critical Zimbra Webmail Flaw Lets a Single Email Hijack a User’s Session by Rebecca Sutton July 13, 2026 by Rebecca Sutton July 13, 2026 Google’s Threat Analysis Group found a critical Zimbra XSS vulnerability in the Classic Web Client that lets a crafted email hijack a live session. Zimbra has patched it in version … FacebookTwitterLinkedinEmail