Vendor
Synacor
As of , 19 Synacor vulnerabilities are on CISA's list of exploited vulnerabilities, 6 of them used in ransomware campaigns; 5 were added in 2026. Patch first: CVE-2026-73570.
Patch first
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 1 | CVE-2026-73570OS Command Injection | Synacor Zimbra Collaboration Suite (ZCS) | Patch nowForensic triage required by CISA | 0.72 | ||
| 2 | CVE-2019-9621Server-Side Request Forgery (SSRF) | Synacor Zimbra Collaboration Suite (ZCS) | Patch this weekMetasploit module; EPSS 0.81; verified Exploit-DB entry | 0.81 | ||
| 3 | CVE-2019-9670Improper Restriction of XML External Entity Reference | Synacor Zimbra Collaboration Suite (ZCS) | Patch this weekMetasploit module; EPSS 0.99; verified Exploit-DB entry | 0.99 | ||
| 4 | CVE-2022-41352Arbitrary File Upload | Synacor Zimbra Collaboration Suite (ZCS) | Patch this weekRansomware use; Metasploit module; EPSS 0.95 | 0.95 | ||
| 5 | CVE-2022-27925Arbitrary File Upload | Synacor Zimbra Collaboration Suite (ZCS) | Patch this weekRansomware use; Metasploit module; EPSS 0.99 | 0.99 | ||
| 6 | CVE-2022-37042Authentication Bypass | Synacor Zimbra Collaboration Suite (ZCS) | Patch this weekRansomware use; Metasploit module; EPSS 0.92 | 0.92 | ||
| 7 | CVE-2020-7796(ZCS) Server-Side Request Forgery | Synacor Zimbra Collaboration Suite | Patch this weekEPSS 0.84 | 0.84 | ||
| 8 | CVE-2023-34192Cross-Site Scripting (XSS) | Synacor Zimbra Collaboration Suite (ZCS) | Patch this weekEPSS 0.77 | 0.77 | ||
| 9 | CVE-2024-45519Command Execution | Synacor Zimbra Collaboration Suite (ZCS) | Patch this weekEPSS 0.99 | 0.99 | ||
| 10 | CVE-2022-27924Command Injection | Synacor Zimbra Collaboration Suite (ZCS) | Patch this weekRansomware use; EPSS 0.94 | 0.94 | ||
| 11 | CVE-2018-6882Cross-Site Scripting (XSS) | Synacor Zimbra Collaboration Suite (ZCS) | Patch this weekRansomware use | 0.30 | ||
| 12 | CVE-2022-24682Cross-Site Scripting | Synacor Zimbra Collaborate Suite (ZCS) | Patch this weekRansomware use | 0.31 | ||
| 13 | CVE-2025-68645PHP Remote File Inclusion | Synacor Zimbra Collaboration Suite (ZCS) | Patch soon | 0.49 | ||
| 14 | CVE-2023-37580Cross-Site Scripting (XSS) | Synacor Zimbra Collaboration Suite (ZCS) | Patch soon | 0.49 | ||
| 15 | CVE-2025-66376Cross-Site Scripting | Synacor Zimbra Collaboration Suite (ZCS) | Patch soon | 0.20 | ||
| 16 | CVE-2024-27443Cross-Site Scripting (XSS) | Synacor Zimbra Collaboration Suite (ZCS) | Patch soon | 0.24 | ||
| 17 | CVE-2022-27926Cross-Site Scripting (XSS) | Synacor Zimbra Collaboration Suite (ZCS) | Patch soon | 0.18 | ||
| 18 | CVE-2025-27915Cross-site Scripting | Synacor Zimbra Collaboration Suite (ZCS) | Patch soon | 0.04 | ||
| 19 | CVE-2025-48700Cross-site Scripting | Synacor Zimbra Collaboration Suite (ZCS) | Patch soon | 0.02 |
Products
- Zimbra Collaboration Suite (ZCS)17 entries
- Zimbra Collaborate Suite (ZCS)1 entry
- Zimbra Collaboration Suite1 entry
Added each year
Show the numbers
| Period | entries added |
|---|---|
| 2022 | 7 |
| 2023 | 2 |
| 2024 | 1 |
| 2025 | 4 |
| 2026 | 5 |
Used in ransomware
Changes CISA made to these entries
- CVE-2022-24682 Synacor Zimbra Collaborate Suite (ZCS)Renamed from Zimbra Webmail to Zimbra Collaborate Suite (ZCS). Edited: description and name.
- CVE-2024-45519 Synacor Zimbra Collaboration Suite (ZCS)Renamed from Zimbra Collaboration to Zimbra Collaboration Suite (ZCS). Edited: description and name.
- CVE-2023-37580 Synacor Zimbra Collaboration Suite (ZCS)Renamed from Zimbra Collaboration (ZCS) to Synacor Zimbra Collaboration Suite (ZCS). Edited: description and name.
- CVE-2022-41352 Synacor Zimbra Collaboration Suite (ZCS)Renamed from Zimbra Collaboration (ZCS) to Synacor Zimbra Collaboration Suite (ZCS). Edited: description and name.
- CVE-2022-37042 Synacor Zimbra Collaboration Suite (ZCS)Renamed from Zimbra Collaboration (ZCS) to Synacor Zimbra Collaboration Suite (ZCS). Edited: description and name.
- CVE-2022-27926 Synacor Zimbra Collaboration Suite (ZCS)Renamed from Zimbra Collaboration (ZCS) to Synacor Zimbra Collaboration Suite (ZCS). Edited: description and name.