Skip to content
Exploit Radar Choose my productsProducts My radar

Products › Brands

Brand

Zimbra (Synacor): actively exploited vulnerabilities

19 vulnerabilities in Zimbra (Synacor) products (Collaboration Suite (ZCS)) are in CISA’s catalog of exploited vulnerabilities, 1 of them added in the last 90 days. Last added: August 21, 2026.

Zimbra (Synacor) security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one Zimbra (Synacor) category to your radar, or open its page.

  • Email 19 vulnerabilities

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • Collaboration Suite (ZCS)19 vulnerabilities, Email

Name used by CISA: Synacor. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Zimbra (Synacor) list.

  1. Rank 1

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2020-7796

    Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability

    CVE from 2020, added in 2026

    CVSS severity 9.8critical

    Added Feb 17, 2026

  2. Rank 2

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2026-73570

    Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 8.9high

    Added Aug 21, 2026

  3. Rank 3

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2025-68645

    Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability

    CVSS severity 8.8high

    Added Jan 22, 2026

  4. Rank 4

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2025-48700

    Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

    CVSS severity 6.1medium

    Added Apr 20, 2026

  5. Rank 5

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2025-66376

    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability

    CVSS severity 6.1medium

    Added Mar 18, 2026

  6. Rank 6

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2025-27915

    Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

    CVSS severity 5.4medium

    Added Oct 7, 2025

  7. Rank 7

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2024-45519

    Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability

    CVSS severity 9.8critical

    Added Oct 3, 2024

  8. Rank 8

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2022-41352

    Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Oct 20, 2022

  9. Rank 9

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2022-37042

    Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Aug 11, 2022

  10. Rank 10

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2019-9670

    Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference

    CVE from 2019, added in 2022

    CVSS severity 9.8critical

    Added Jan 10, 2022

Show 9 more vulnerabilities
  1. Rank 11

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2023-34192

    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

    CVE from 2023, added in 2025

    CVSS severity 9.0critical

    Added Feb 25, 2025

  2. Rank 12

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2019-9621

    Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability

    CVE from 2019, added in 2025

    CVSS severity 7.5high

    Added Jul 7, 2025

  3. Rank 13

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2022-27924

    Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability

    Ransomware

    CVSS severity 7.5high

    Added Aug 4, 2022

  4. Rank 14

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2022-27925

    Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

    Ransomware

    CVSS severity 7.2high

    Added Aug 11, 2022

  5. Rank 15

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2024-27443

    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

    CVSS severity 6.1medium

    Added May 19, 2025

  6. Rank 16

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2023-37580

    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

    CVSS severity 6.1medium

    Added Jul 27, 2023

  7. Rank 17

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2022-27926

    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

    CVSS severity 6.1medium

    Added Apr 3, 2023

  8. Rank 18

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2018-6882

    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

    RansomwareCVE from 2018, added in 2022

    CVSS severity 6.1medium

    Added Apr 19, 2022

  9. Rank 19

    Zimbra (Synacor) Collaboration Suite (ZCS)CVE-2022-24682

    Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability

    Ransomware

    CVSS severity 6.1medium

    Added Feb 25, 2022

Follow and verify

Get new Zimbra (Synacor) vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.