CyberSecBulletin

Zoho Mail vulnerabilities

We track 1 vulnerability in Zoho Mail products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 31, 2025.

1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score

Latest Zoho Mail vulnerabilities

  • 7.1 High severity

    Zoho ZeptoMail: Cross-Site Request Forgery

    CVE-2025-49028Zoho Mail

    Cross-Site Request Forgery (CSRF) vulnerability in Zoho Mail Zoho ZeptoMail transmail allows Stored XSS.This issue affects Zoho ZeptoMail: from n/a through <= 3.3.1.