CVE-2026-93643

Summary

This flaw allows unauthenticated attackers to perform path-traversal writes and execute commands as zimbra by abusing unsigned save fields in supported public Briefcase documents.

Exploitability

Exploitation requires access to an existing supported public Briefcase document and is moderately difficult due to the need for specific document manipulation.

Blast radius

If exploited, the attacker could gain elevated privileges as zimbra, potentially leading to full system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the affected feature or restrict access to the named endpoint.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.