ZDI-26-130
HIGH 7.5
Published
Feb 25, 2026
IceWarp collaboration Directory Traversal Information Disclosure Vulnerability
IceWarp
IceWarp contains a high-severity information disclosure vulnerability (CVE-2026-2493) that allows unauthenticated remote attackers to access sensitive data without needing credentials. The CVSS score of 7.5 indicates this is a significant risk that requires prompt attention. Security teams should prioritize patching IceWarp installations immediately and review access logs for any signs of exploitation while updates are being deployed.