Ref# ADV2025_383 | Date: Oct 21st 2025

---

Zimbra has published a security advisory highlighting a vulnerability in the following product on October 16^th, 2025. It is recommended that you take the necessary precaution by ensuring your product is always updated.

• Zimbra Daffodil – versions prior to v10.1.12

For more information on this update, you can follow this URL:

• Zimbra Daffodil (v10.1.12) Patch Release

The Guyana National CIRT recommends that users and administrators review this update and apply it where necessary.

PDF Download: Zimbra Security Advisory

References

• Zimbra Daffodil (v10.1.12) Patch Release. (October 16, 2025). Retrieved from Zimbra. https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.12#Zimbra_Daffodil_(v10.1.12)_Patch_Release

 

• Zimbra security advisory. (October 17, 2025). Retrieved from Canadian Centre for Cyber Security. https://www.cyber.gc.ca/en/alerts-advisories/zimbra-security-advisory-av25-678