EN
DeutschEnglishEspañolFrançaisItaliano

Start free Dashboard

Exploited vulnerabilities

Synacor

19 Synacor vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.

In the catalogue19
Last 12 months5
In ransomware campaigns6
Last addition21 August 2026

The vulnerabilities19

  1. 21 August 2026CVE-2026-73570Zimbra Collaboration Suite (ZCS)Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
  2. 20 April 2026CVE-2025-48700Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
  3. 18 March 2026CVE-2025-66376Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability
  4. 17 February 2026CVE-2020-7796Zimbra Collaboration SuiteSynacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability
  5. 22 January 2026CVE-2025-68645 Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability
  6. 7 October 2025CVE-2025-27915Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
  7. 7 July 2025CVE-2019-9621Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability
  8. 19 May 2025CVE-2024-27443Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
  9. 25 February 2025CVE-2023-34192Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
  10. 3 October 2024CVE-2024-45519Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability
  11. 27 July 2023CVE-2023-37580Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
  12. 3 April 2023CVE-2022-27926Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
  13. 20 October 2022CVE-2022-41352Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityRansomware
  14. 11 August 2022CVE-2022-37042Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass VulnerabilityRansomware
  15. 11 August 2022CVE-2022-27925Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityRansomware
  16. 4 August 2022CVE-2022-27924Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Command Injection VulnerabilityRansomware
  17. 19 April 2022CVE-2018-6882Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityRansomware
  18. 25 February 2022CVE-2022-24682Zimbra Collaborate Suite (ZCS)Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting VulnerabilityRansomware
  19. 10 January 2022CVE-2019-9670Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference

Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.

Alerts only on the products you use

With My Defence you receive alerts and briefings only on the products you use, Synacor included.

Start freeMy Defence

All vendorsThe catalogue on the CISA website