https://exploit-radar.com/en/flux/marques/zimbra.xml The latest additions to CISA’s catalog of exploited vulnerabilities for Zimbra (Synacor) products. 2026-08-21T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2026-73570/ 2026-08-21T00:00:00Z

Apply the patches or mitigations from Zimbra (Synacor); if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on August 21, 2026.

https://exploit-radar.com/en/cve/CVE-2025-48700/ 2026-04-20T00:00:00Z

Apply the patches or mitigations from Zimbra (Synacor); if none are available, stop using the product. For cloud services, follow the guidance from Zimbra (Synacor). CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on April 20, 2026.

https://exploit-radar.com/en/cve/CVE-2025-66376/ 2026-03-18T00:00:00Z

Apply the patches or mitigations from Zimbra (Synacor); if none are available, stop using the product. For cloud services, follow the guidance from Zimbra (Synacor). CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on March 18, 2026.

https://exploit-radar.com/en/cve/CVE-2020-7796/ 2026-02-17T00:00:00Z

Apply the patches or mitigations from Zimbra (Synacor); if none are available, stop using the product. For cloud services, follow the guidance from Zimbra (Synacor). CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 17, 2026.

https://exploit-radar.com/en/cve/CVE-2025-68645/ 2026-01-22T00:00:00Z

Apply the patches or mitigations from Zimbra (Synacor); if none are available, stop using the product. For cloud services, follow the guidance from Zimbra (Synacor). CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on January 22, 2026.

https://exploit-radar.com/en/cve/CVE-2025-27915/ 2025-10-07T00:00:00Z

Apply the patches or mitigations from Zimbra (Synacor); if none are available, stop using the product. For cloud services, follow the guidance from Zimbra (Synacor). CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 7, 2025.

https://exploit-radar.com/en/cve/CVE-2019-9621/ 2025-07-07T00:00:00Z

Apply the patches or mitigations from Zimbra (Synacor); if none are available, stop using the product. For cloud services, follow the guidance from Zimbra (Synacor). CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on July 7, 2025.

https://exploit-radar.com/en/cve/CVE-2024-27443/ 2025-05-19T00:00:00Z

Apply the patches or mitigations from Zimbra (Synacor); if none are available, stop using the product. For cloud services, follow the guidance from Zimbra (Synacor). CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 19, 2025.

https://exploit-radar.com/en/cve/CVE-2023-34192/ 2025-02-25T00:00:00Z

Apply the patches or mitigations from Zimbra (Synacor); if none are available, stop using the product. For cloud services, follow the guidance from Zimbra (Synacor). CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 25, 2025.

https://exploit-radar.com/en/cve/CVE-2024-45519/ 2024-10-03T00:00:00Z

Apply the patches or mitigations from Zimbra (Synacor); if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 3, 2024.

https://exploit-radar.com/en/cve/CVE-2023-37580/ 2023-07-27T00:00:00Z

Apply the patches or mitigations from Zimbra (Synacor); if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on July 27, 2023.

https://exploit-radar.com/en/cve/CVE-2022-27926/ 2023-04-03T00:00:00Z

Apply the security update from Zimbra (Synacor). CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on April 3, 2023.

https://exploit-radar.com/en/cve/CVE-2022-41352/ 2022-10-20T00:00:00Z

Apply the security update from Zimbra (Synacor). CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on October 20, 2022.

https://exploit-radar.com/en/cve/CVE-2022-37042/ 2022-08-11T00:00:00Z

Apply the security update from Zimbra (Synacor). CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on August 11, 2022.

https://exploit-radar.com/en/cve/CVE-2022-27925/ 2022-08-11T00:00:00Z

Apply the security update from Zimbra (Synacor). CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on August 11, 2022.

https://exploit-radar.com/en/cve/CVE-2022-27924/ 2022-08-04T00:00:00Z

Apply the security update from Zimbra (Synacor). CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on August 4, 2022.

https://exploit-radar.com/en/cve/CVE-2018-6882/ 2022-04-19T00:00:00Z

Apply the security update from Zimbra (Synacor). CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on April 19, 2022.

https://exploit-radar.com/en/cve/CVE-2022-24682/ 2022-02-25T00:00:00Z

Apply the security update from Zimbra (Synacor). CISA deadline: 14 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on February 25, 2022.

https://exploit-radar.com/en/cve/CVE-2019-9670/ 2022-01-10T00:00:00Z

Apply the security update from Zimbra (Synacor). CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on January 10, 2022.