Vendor
Synacor
- CVEs tracked · all time
- 5
- in CISA KEV · all time
- 5
- articles · since 11 Sep
- 5
- articles · all time
- 35
5 articles since 11 Sep.
Show as table
| Day (UTC) | Articles |
|---|---|
| Wed 30 Sep | 4 |
| Thu 1 Oct | 1 |
Products: Zimbra Collaboration Suite, Zimbra Collaboration Suite (ZCS)
CVEs
5 CVEsCVE-2026-73570Zimbra Collaboration Suite (ZCS) OS Command Injection VulnerabilityCVSS8.9HighExploited72%EPSS12articles
CVE-2025-66376Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting VulnerabilityCVSS7.2HighExploited20%EPSS12articles
CVE-2025-48700Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilityCVSS6.1MediumExploited1.7%EPSS5articles
CVE-2020-7796Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery VulnerabilityCVSSUnratedExploited94%EPSS2articles
CVE-2025-68645Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion VulnerabilityCVSSUnratedExploited49%EPSS4articles
- Attackers Exploited Zimbra Flaw Before Public DisclosureSecurityWeek
- Attackers Exploit Zimbra Flaw to Steal Emails and Authentication DataArs Technica
- Unpatched Zimbra Servers Exposed to Shells and Credential TheftSecurityOnline
- Attackers Exploit Zimbra Flaw to Steal Mail and Maintain AccessThe Hacker News
- Attackers Exploit Zimbra Flaw to Deploy Web Shells and Steal MailMicrosoft
- Exploited Zimbra Flaw Highlights Shrinking Window to PatchDark Reading
- CISA adds critical Zimbra flaw CVE-2026-73570 to KEV listSecurity Affairs
- CISA flags critical Zimbra command injection flaw in KEV catalogCISA · official notice
- CISA Adds High Zimbra SMTP Flaw CVE‑2026‑73570 to Exploit ListCISA · official notice
- CERT Polska warns of Zimbra RCE flaw CVE-2026-73570 after patchSecurity Affairs
- Zimbra CVE-2026-73570 bug lets attackers run OS commandsSecurityWeek
- Zimbra flaw (CVE-2026-73570) lets attackers run arbitrary codeSecurityOnline
- Zimbra XSS bug CVE‑2025-66376 lets Russian hackers steal mailSOCRadar
- US agencies warn Laundry Bear exploits CVE-2025-66376 in ZimbraSecurity Affairs
- LAUNDRY BEAR Uses CVE-2025-66376 to Hack Zimbra via PhishingCISA · official notice
- Russian zero-click attack exploits Zimbra flaw CVE-2025-66376Infosecurity
- Russian hackers exploit Zimbra flaw in zero click email campaignUnit 42
- CISA Adds Cisco SD WAN, Zimbra XSS Flaws to KEV CatalogSecurityWeek
- CISA adds weaponised PaperCut, TeamCity flaws to KEV catalogSecurity Affairs
- CISA adds eight KEV flaws, Cisco SDWAN bugs actively exploitedThe Hacker News
- Synacor Zimbra XSS Flaw (CVE-2025-48700) Exposes User SessionsCISA · official notice
- CISA flags active Synacor Zimbra XSS flaw, urges immediate patchCISA · official notice
- Russian APT targets Ukraine via Zimbra XSS flaw CVE-2025-66376Security Affairs
- Russian hackers exploit Zimbra flaw in Ukrainian govt attacksDataBreaches
- Russian APT Exploits Zimbra Vulnerability Against UkraineSecurityWeek
- CISA Warns of Zimbra, SharePoint Flaw Exploits; Cisco Zero-Day Hit in Ransomware AttacksThe Hacker News
- U.S. CISA adds Microsoft SharePoint and Zimbra flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs
- CISA Adds CVE-2025-66376 to Known Exploited Vulnerabilities CatalogueCISA · official notice
- CISA Adds CVE-2025-66376 to Known Exploited Vulnerabilities CatalogueCISA · official notice
- U.S. CISA adds Google Chromium CSS, Microsoft Windows, TeamT5 ThreatSonar Anti-Ransomware, and Zimbra flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs
- CISA Flags Four Security Flaws Under Active Exploitation in Latest KEV UpdateThe Hacker News
- CISA Updates KEV Catalog with Four Actively Exploited Software VulnerabilitiesThe Hacker News
- U.S. CISA adds Prettier eslint-config-prettier, Vite Vitejs, Versa Concerto SD-WAN orchestration platform, and Synacor Zimbra Collaboration Suite flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs
- Organizations Warned of Exploited Zimbra Collaboration VulnerabilitySecurityWeek
- CISA Adds 4 Critical Flaws to “Must-Patch” List as Exploits SurgeSecurityOnline · first in our coverage