ZDI-26-130 HIGH 7.5 Published Feb 25, 2026

IceWarp collaboration Directory Traversal Information Disclosure Vulnerability

IceWarp

IceWarp contains a high-severity information disclosure vulnerability (CVE-2026-2493) that allows unauthenticated remote attackers to access sensitive data without needing credentials. The CVSS score of 7.5 indicates this is a significant risk that requires prompt attention. Security teams should prioritize patching IceWarp installations immediately and review access logs for any signs of exploitation while updates are being deployed.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy