Cve20207796 Zimbra Collaboration Suite Full Link May 2026

Technical Analysis: CVE-2020-7796 and the Zimbra Collaboration Suite

, requiring organizations to remediate it promptly due to active exploitation in the wild. National Institute of Standards and Technology (.gov) Vulnerability Overview Vulnerability Type: Server-Side Request Forgery (SSRF) (CWE-918). (CVSS v3.1 score of

Impact on Zimbra Collaboration Suite

CISA added CVE-2020-7796 to its Known Exploited Vulnerabilities (KEV) Catalog on February 17, 2026

While the vulnerability was first identified in 2020, it remains a major threat. , citing active exploitation in the wild. Organizations were given a due date of March 10, 2026, to apply mitigations. Affected Versions cve20207796 zimbra collaboration suite full