Zimbra releases security patches for critical command injection and SSRF vulnerabilities

Zimbra has issued a security update addressing multiple high-severity vulnerabilities, including command injection, cross-site scripting (XSS), and server-side request forgery (SSRF). These flaws could allow unauthorized actors to compromise mail servers if left unpatched. The urgency of the update depends on the exposure of specific Zimbra instances to public networks.