MaxMnMl/zimbramail-CVE-2025-68645-poc

PoC

CVE-2025-68645 - A Local File Inclusion (LFI) vulnerability in the Webmail Classic UI of Zimbra Collaboration

view exploit source poc_in_githubauthor MaxMnMlpublished 2026-01-01catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-68645US	—OT critical	48.9% (99th)	KEV	2025-12-22
A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1 because of improper handling of user-supplied request parame…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.