https://exploit-radar.com/en/flux/categories/messagerie.xml Exploit Radar: Email The latest additions to CISA’s catalog of exploited vulnerabilities in the “Email” category (indicative classification). 2026-09-14T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2026-76461/ CVE-2026-76461 — Cisco Secure Email Gateway 2026-09-14T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on September 14, 2026. https://exploit-radar.com/en/cve/CVE-2026-73570/ CVE-2026-73570 — Zimbra (Synacor) Collaboration Suite (ZCS) 2026-08-21T00:00:00Z Apply the patches or mitigations from Zimbra (Synacor); if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on August 21, 2026. https://exploit-radar.com/en/cve/CVE-2026-42897/ CVE-2026-42897 — Microsoft Exchange Server 2026-05-15T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on May 15, 2026. https://exploit-radar.com/en/cve/CVE-2025-48700/ CVE-2025-48700 — Zimbra (Synacor) Collaboration Suite (ZCS) 2026-04-20T00:00:00Z Apply the patches or mitigations from Zimbra (Synacor); if none are available, stop using the product. For cloud services, follow the guidance from Zimbra (Synacor). CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on April 20, 2026. https://exploit-radar.com/en/cve/CVE-2023-21529/ CVE-2023-21529 — Microsoft Exchange Server 2026-04-13T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on April 13, 2026. https://exploit-radar.com/en/cve/CVE-2025-66376/ CVE-2025-66376 — Zimbra (Synacor) Collaboration Suite (ZCS) 2026-03-18T00:00:00Z Apply the patches or mitigations from Zimbra (Synacor); if none are available, stop using the product. For cloud services, follow the guidance from Zimbra (Synacor). CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on March 18, 2026. https://exploit-radar.com/en/cve/CVE-2025-49113/ CVE-2025-49113 — Roundcube Webmail 2026-02-20T00:00:00Z Apply the patches or mitigations from Roundcube; if none are available, stop using the product. For cloud services, follow the guidance from Roundcube. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 20, 2026. https://exploit-radar.com/en/cve/CVE-2025-68461/ CVE-2025-68461 — Roundcube Webmail 2026-02-20T00:00:00Z Apply the patches or mitigations from Roundcube; if none are available, stop using the product. For cloud services, follow the guidance from Roundcube. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 20, 2026. https://exploit-radar.com/en/cve/CVE-2020-7796/ CVE-2020-7796 — Zimbra (Synacor) Collaboration Suite (ZCS) 2026-02-17T00:00:00Z Apply the patches or mitigations from Zimbra (Synacor); if none are available, stop using the product. For cloud services, follow the guidance from Zimbra (Synacor). CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 17, 2026. https://exploit-radar.com/en/cve/CVE-2026-24423/ CVE-2026-24423 — SmarterTools SmarterMail 2026-02-05T00:00:00Z Apply the patches or mitigations from SmarterTools; if none are available, stop using the product. For cloud services, follow the guidance from SmarterTools. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on February 5, 2026. https://exploit-radar.com/en/cve/CVE-2025-52691/ CVE-2025-52691 — SmarterTools SmarterMail 2026-01-26T00:00:00Z Apply the patches or mitigations from SmarterTools; if none are available, stop using the product. For cloud services, follow the guidance from SmarterTools. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on January 26, 2026. https://exploit-radar.com/en/cve/CVE-2026-23760/ CVE-2026-23760 — SmarterTools SmarterMail 2026-01-26T00:00:00Z Apply the patches or mitigations from SmarterTools; if none are available, stop using the product. For cloud services, follow the guidance from SmarterTools. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on January 26, 2026. https://exploit-radar.com/en/cve/CVE-2025-68645/ CVE-2025-68645 — Zimbra (Synacor) Collaboration Suite (ZCS) 2026-01-22T00:00:00Z Apply the patches or mitigations from Zimbra (Synacor); if none are available, stop using the product. For cloud services, follow the guidance from Zimbra (Synacor). CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on January 22, 2026. https://exploit-radar.com/en/cve/CVE-2025-20393/ CVE-2025-20393 — Cisco Secure Email Gateway 2025-12-17T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. For cloud services, follow the guidance from Cisco. CISA deadline: 7 days. Added to CISA’s catalog of exploited vulnerabilities on December 17, 2025. https://exploit-radar.com/en/cve/CVE-2025-27915/ CVE-2025-27915 — Zimbra (Synacor) Collaboration Suite (ZCS) 2025-10-07T00:00:00Z Apply the patches or mitigations from Zimbra (Synacor); if none are available, stop using the product. For cloud services, follow the guidance from Zimbra (Synacor). CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 7, 2025. https://exploit-radar.com/en/cve/CVE-2025-59689/ CVE-2025-59689 — Libraesva Email Security Gateway 2025-09-29T00:00:00Z Apply the patches or mitigations from Libraesva; if none are available, stop using the product. For cloud services, follow the guidance from Libraesva. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 29, 2025. https://exploit-radar.com/en/cve/CVE-2019-9621/ CVE-2019-9621 — Zimbra (Synacor) Collaboration Suite (ZCS) 2025-07-07T00:00:00Z Apply the patches or mitigations from Zimbra (Synacor); if none are available, stop using the product. For cloud services, follow the guidance from Zimbra (Synacor). CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on July 7, 2025. https://exploit-radar.com/en/cve/CVE-2024-42009/ CVE-2024-42009 — Roundcube Webmail 2025-06-09T00:00:00Z Apply the patches or mitigations from Roundcube; if none are available, stop using the product. For cloud services, follow the guidance from Roundcube. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 9, 2025. https://exploit-radar.com/en/cve/CVE-2024-11182/ CVE-2024-11182 — MDaemon Email Server 2025-05-19T00:00:00Z Apply the patches or mitigations from MDaemon; if none are available, stop using the product. For cloud services, follow the guidance from MDaemon. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 19, 2025. https://exploit-radar.com/en/cve/CVE-2024-27443/ CVE-2024-27443 — Zimbra (Synacor) Collaboration Suite (ZCS) 2025-05-19T00:00:00Z Apply the patches or mitigations from Zimbra (Synacor); if none are available, stop using the product. For cloud services, follow the guidance from Zimbra (Synacor). CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 19, 2025. https://exploit-radar.com/en/cve/CVE-2025-42599/ CVE-2025-42599 — Qualitia Active! Mail 2025-04-28T00:00:00Z Apply the patches or mitigations from Qualitia; if none are available, stop using the product. For cloud services, follow the guidance from Qualitia. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on April 28, 2025. https://exploit-radar.com/en/cve/CVE-2023-34192/ CVE-2023-34192 — Zimbra (Synacor) Collaboration Suite (ZCS) 2025-02-25T00:00:00Z Apply the patches or mitigations from Zimbra (Synacor); if none are available, stop using the product. For cloud services, follow the guidance from Zimbra (Synacor). CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 25, 2025. https://exploit-radar.com/en/cve/CVE-2024-21413/ CVE-2024-21413 — Microsoft Outlook 2025-02-06T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 6, 2025. https://exploit-radar.com/en/cve/CVE-2024-37383/ CVE-2024-37383 — Roundcube Webmail 2024-10-24T00:00:00Z Apply the patches or mitigations from Roundcube; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 24, 2024. https://exploit-radar.com/en/cve/CVE-2024-45519/ CVE-2024-45519 — Zimbra (Synacor) Collaboration Suite (ZCS) 2024-10-03T00:00:00Z Apply the patches or mitigations from Zimbra (Synacor); if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 3, 2024. https://exploit-radar.com/en/cve/CVE-2021-31196/ CVE-2021-31196 — Microsoft Exchange Server 2024-08-21T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on August 21, 2024. https://exploit-radar.com/en/cve/CVE-2020-13965/ CVE-2020-13965 — Roundcube Webmail 2024-06-26T00:00:00Z Apply the patches or mitigations from Roundcube; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 26, 2024. https://exploit-radar.com/en/cve/CVE-2024-21410/ CVE-2024-21410 — Microsoft Exchange Server 2024-02-15T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 15, 2024. https://exploit-radar.com/en/cve/CVE-2023-43770/ CVE-2023-43770 — Roundcube Webmail 2024-02-12T00:00:00Z Apply the patches or mitigations from Roundcube; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 12, 2024. https://exploit-radar.com/en/cve/CVE-2023-5631/ CVE-2023-5631 — Roundcube Webmail 2023-10-26T00:00:00Z Apply the patches or mitigations from Roundcube; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 26, 2023. https://exploit-radar.com/en/cve/CVE-2023-37580/ CVE-2023-37580 — Zimbra (Synacor) Collaboration Suite (ZCS) 2023-07-27T00:00:00Z Apply the patches or mitigations from Zimbra (Synacor); if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on July 27, 2023. https://exploit-radar.com/en/cve/CVE-2023-35311/ CVE-2023-35311 — Microsoft Outlook 2023-07-11T00:00:00Z Apply the update from Microsoft; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on July 11, 2023. https://exploit-radar.com/en/cve/CVE-2020-12641/ CVE-2020-12641 — Roundcube Webmail 2023-06-22T00:00:00Z Apply the security update from Roundcube. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 22, 2023. https://exploit-radar.com/en/cve/CVE-2021-44026/ CVE-2021-44026 — Roundcube Webmail 2023-06-22T00:00:00Z Apply the security update from Roundcube. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 22, 2023. https://exploit-radar.com/en/cve/CVE-2020-35730/ CVE-2020-35730 — Roundcube Webmail 2023-06-22T00:00:00Z Apply the security update from Roundcube. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 22, 2023. https://exploit-radar.com/en/cve/CVE-2023-2868/ CVE-2023-2868 — Barracuda Networks Email Security Gateway (ESG) 2023-05-26T00:00:00Z Apply the security update from Barracuda Networks. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 26, 2023. https://exploit-radar.com/en/cve/CVE-2022-27926/ CVE-2022-27926 — Zimbra (Synacor) Collaboration Suite (ZCS) 2023-04-03T00:00:00Z Apply the security update from Zimbra (Synacor). CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on April 3, 2023. https://exploit-radar.com/en/cve/CVE-2022-41080/ CVE-2022-41080 — Microsoft Exchange Server 2023-01-10T00:00:00Z Apply the security update from Microsoft. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on January 10, 2023. https://exploit-radar.com/en/cve/CVE-2022-41352/ CVE-2022-41352 — Zimbra (Synacor) Collaboration Suite (ZCS) 2022-10-20T00:00:00Z Apply the security update from Zimbra (Synacor). CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on October 20, 2022. https://exploit-radar.com/en/cve/CVE-2022-41040/ CVE-2022-41040 — Microsoft Exchange Server 2022-09-30T00:00:00Z Apply the security update from Microsoft. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on September 30, 2022. https://exploit-radar.com/en/cve/CVE-2022-41082/ CVE-2022-41082 — Microsoft Exchange Server 2022-09-30T00:00:00Z Apply the security update from Microsoft. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on September 30, 2022. https://exploit-radar.com/en/cve/CVE-2022-37042/ CVE-2022-37042 — Zimbra (Synacor) Collaboration Suite (ZCS) 2022-08-11T00:00:00Z Apply the security update from Zimbra (Synacor). CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on August 11, 2022. https://exploit-radar.com/en/cve/CVE-2022-27925/ CVE-2022-27925 — Zimbra (Synacor) Collaboration Suite (ZCS) 2022-08-11T00:00:00Z Apply the security update from Zimbra (Synacor). CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on August 11, 2022. https://exploit-radar.com/en/cve/CVE-2022-27924/ CVE-2022-27924 — Zimbra (Synacor) Collaboration Suite (ZCS) 2022-08-04T00:00:00Z Apply the security update from Zimbra (Synacor). CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on August 4, 2022. https://exploit-radar.com/en/cve/CVE-2018-6882/ CVE-2018-6882 — Zimbra (Synacor) Collaboration Suite (ZCS) 2022-04-19T00:00:00Z Apply the security update from Zimbra (Synacor). CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on April 19, 2022. https://exploit-radar.com/en/cve/CVE-2010-4344/ CVE-2010-4344 — Exim 2022-03-25T00:00:00Z Apply the security update from Exim. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 25, 2022. https://exploit-radar.com/en/cve/CVE-2020-7247/ CVE-2020-7247 — OpenBSD OpenSMTPD 2022-03-25T00:00:00Z Apply the security update from OpenBSD. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 25, 2022. https://exploit-radar.com/en/cve/CVE-2010-4345/ CVE-2010-4345 — Exim 2022-03-25T00:00:00Z Apply the security update from Exim. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 25, 2022. https://exploit-radar.com/en/cve/CVE-2019-16928/ CVE-2019-16928 — Exim 2022-03-03T00:00:00Z Apply the security update from Exim. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on March 3, 2022. https://exploit-radar.com/en/cve/CVE-2018-8581/ CVE-2018-8581 — Microsoft Exchange Server 2022-03-03T00:00:00Z Apply the security update from Microsoft. CISA deadline: 14 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on March 3, 2022.