Zimbra - Zimbra Collaboration Suite (zcs) - CRITICAL - CVE-2026-93643. An unauthenticated remote attacker can exploit a vulnerability in OnlyOffice/Document Editing when exposed through public access on Zimbra's Briefcase documents. By manipulating unsigned save fields, the attacker can perform path traversal writes, leading to unauthorized command execution under the Zimbra application's permissions. It is recommended that users apply security updates and restrict public access to sensitive document types to mitigate this vulnerability.