Vulnerability intelligence
CVE-2025-66376
Official description is being retrieved from NVD — refresh shortly.
CVSS Score
7.2
High
EPSS — Exploit Probability
0.0%
Riskier than 0% of all CVEs
Exploitation
Confirmed in the wild
KEV since 2026-03-18
Remediation
Patch available
Federal deadline 2026-04-01
3 articles across 3 outlets · first covered Jul 23, 2026 · latest Jul 23, 2026
Tracked incidents
Associated threat actors
Coverage timeline
-
LAUNDRY BEAR Uses CVE-2025-66376 to Hack Zimbra via Phishingwww.cisa.gov · Jul 23, 2026
-
Russian zero-click attack exploits Zimbra flaw CVE-2025-66376www.infosecurity-magazine.com · Jul 23, 2026
-
Russian hackers exploit Zimbra flaw in zero click email campaignunit42.paloaltonetworks.com · Jul 23, 2026