CISA has ordered U.S. government agencies to secure their servers against an actively exploited vulnerability in the Zimbra Collaboration Suite (ZCS). [...]
CISA orders feds to patch Zimbra XSS flaw exploited in attacks
Summary + source link. No paywalls, no tracking.