Hotfix Available 5 Feb for Zero-day Exploit Vulnerability in Zimbra 8.8.15

A new Zero-day exploit has been identified that affects Zimbra 8.8.15. Since learning of the reported vulnerability, Zimbra Engineering has verified the issue and produced a hotfix (for 8.8.15 p30). The hotfix will be available to Zimbra customers through Zimbra Support. A durable fix for the issue is undergoing testing and quality review and will be made available as an update to 8.8.15p30. The updated patch is scheduled for availability via our download site on 5 February 2022.

The issue only affects Zimbra 8.8.15 and prior versions. We recommend that all Zimbra customers use the most recent release available to avoid any issues.