Zimbra is the webmail deployed by the University of Angers (UA) for all its students and staff. Access to this messaging service relies on the university’s ENT account, which is protected by a unique username and password specific to the institution. Understanding this authentication chain helps avoid most of the issues encountered during login.
CVE-2026-73570 Vulnerability on Zimbra: What It Means for UA Users
Since the summer of 2026, a critical vulnerability referenced as CVE-2026-73570 affects the SNMP component of Zimbra Collaboration Suite. Rated 8.9 on the CVSS scale, it allows an unauthenticated attacker to execute system commands remotely when the zimbra-snmp package is installed and SNMP notifications are enabled.
For users, the direct consequence is straightforward: an outdated Zimbra server (below version 10.1.20) exposes email accounts to compromise. The UA applies its own update schedules, but any service interruption or abnormal behavior of the webmail during this period may be related to these security maintenance operations.
If the UA Zimbra login page displays a server error message or an invalid certificate, the recommended action is to wait a few hours and check the announcements on the ENT portal before attempting a password reset.
ENT Account and Backup Email: The Prerequisite for Any Zimbra Login
The UA’s Zimbra messaging system does not have a standalone registration system. Authentication is entirely through the ENT portal of the University of Angers. The ENT username/password combination is what unlocks access to the webmail.
A often overlooked point concerns the backup email address. When activating the ENT account, the university requires the provision of an external email address (such as Gmail, Outlook, or others). This address is the only recovery channel in case of a forgotten password. Without it, the reset procedure requires a physical visit or direct contact with the IT service.
Check and Update Your Backup Email Address
The verification is done from the personal space of the ENT portal. You must ensure that the external email address provided is still active and accessible. A change of email provider or an abandoned secondary account renders this security ineffective.
Providing an active backup email address is the first action to take after each academic year begins, even before checking your Zimbra inbox.
Accessing the Zimbra Webmail of the University of Angers: URL and Protocol
The Zimbra webmail interface of the UA is accessible from a browser, without the need to install software. The login address is the one provided by the university on its digital portal. Entering the ENT username (usually in the format firstname.lastname) and the associated password is sufficient to open the inbox.
Configuring Zimbra on an External Mail Client
For those who prefer to use Outlook, Thunderbird, or a smartphone mail app, the configuration relies on the IMAP or POP3 protocols for receiving, and SMTP for sending. The IMAP protocol, on port 993 with SSL encryption, is preferred: it synchronizes folders across all devices, unlike POP3 which downloads messages without keeping them on the server.
The parameters to enter in the mail client are as follows:
- Incoming IMAP server: the address provided by the UA documentation, port 993, SSL/TLS security
- Outgoing SMTP server: the university’s SMTP address, port 587, STARTTLS security
- Username: the full email address in the university format ([email protected] or equivalent)
- Password: that of the ENT account
A common mistake is to use the password of an old personal account instead of the one for the active ENT account. Each academic year may involve a password renewal, which invalidates the configurations saved in mail clients.
Resolving a Zimbra Login Block at the UA
Connection issues can be quickly categorized into a few identifiable types.
- Expired or forgotten password: the reset process goes through the ENT portal, via the external backup email. Without a backup email, contact the UA IT service
- Login page inaccessible: check if maintenance is announced on the ENT portal. Security updates (like the one related to CVE-2026-73570) may cause temporary unavailability
- Invalid security certificate in the browser: do not ignore this warning. It may indicate a phishing attempt or a server being reconfigured
- Mail client refusing to connect: ensure that the port, protocol, and password match the current ENT account settings
Phishing Targeting University Accounts
Phishing campaigns targeting university email accounts are on the rise. An email asking you to “confirm your Zimbra credentials” via an external link never comes from the UA. The university never asks for your password in response to an email. Any login page whose URL does not match the official domain of the institution should be ignored and reported.
The last point to keep in mind: the reliability of the connection to Zimbra depends as much on server-side maintenance as on user diligence. A strong password, an up-to-date backup email address, and vigilance against suspicious emails cover the vast majority of blocking situations.
