CISA's list that day
18 March 2026
On CISA added 2 vulnerabilities to its list of exploited vulnerabilities, in Synacor Zimbra Collaboration Suite (ZCS) and Microsoft SharePoint. The US federal deadlines run from to .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2026-20963Deserialization of Untrusted Data | Microsoft SharePoint | Patch soon | 0.30 | ||
| CVE-2025-66376Cross-Site Scripting | Synacor Zimbra Collaboration Suite (ZCS) | Patch soon | 0.20 |