Skip to content
Exploit Radar Choose my productsProducts My radar
English

Products › Brands

Brand

Zimbra (Synacor): actively exploited vulnerabilities

19 vulnerabilities in Zimbra (Synacor) products (Collaboration Suite (ZCS)) are in CISA’s catalog of exploited vulnerabilities, 1 of them added in the last 90 days. Last added: August 21, 2026.

Zimbra (Synacor) security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one Zimbra (Synacor) category to your radar, or open its page.

  • Email 19 vulnerabilities

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • Collaboration Suite (ZCS) 19 vulnerabilities · Email

Name used by CISA: Synacor. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Zimbra (Synacor) list.

  1. Rank 1Zimbra (Synacor) Collaboration Suite (ZCS)

    CVE-2020-7796

    CVE from 2020, added in 2026

    Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Feb 17, 2026
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  2. Rank 2Zimbra (Synacor) Collaboration Suite (ZCS)

    CVE-2026-73570

    Hunt for compromise (CISA)

    Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Aug 21, 2026
    CISA deadline
    3 days
    CVSS severity
    8.9 (high)

  3. Rank 3Zimbra (Synacor) Collaboration Suite (ZCS)

    CVE-2025-68645

    Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Jan 22, 2026
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  4. Rank 4Zimbra (Synacor) Collaboration Suite (ZCS)

    CVE-2025-48700

    Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Apr 20, 2026
    CISA deadline
    3 days
    CVSS severity
    6.1 (medium)

  5. Rank 5Zimbra (Synacor) Collaboration Suite (ZCS)

    CVE-2025-66376

    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Mar 18, 2026
    CISA deadline
    14 days
    CVSS severity
    6.1 (medium)

  6. Rank 6Zimbra (Synacor) Collaboration Suite (ZCS)

    CVE-2025-27915

    Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Oct 7, 2025
    CISA deadline
    21 days
    CVSS severity
    5.4 (medium)

  7. Rank 7Zimbra (Synacor) Collaboration Suite (ZCS)

    CVE-2024-45519

    Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Oct 3, 2024
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  8. Rank 8Zimbra (Synacor) Collaboration Suite (ZCS)

    CVE-2022-41352

    Ransomware

    Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Oct 20, 2022
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  9. Rank 9Zimbra (Synacor) Collaboration Suite (ZCS)

    CVE-2022-37042

    Ransomware

    Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 11, 2022
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  10. Rank 10Zimbra (Synacor) Collaboration Suite (ZCS)

    CVE-2019-9670

    CVE from 2019, added in 2022

    Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference

    Added more than a year ago: ranked by severity.

    Added
    Jan 10, 2022
    CISA deadline
    181 days
    CVSS severity
    9.8 (critical)
Show 9 more vulnerabilities

  1. Rank 11Zimbra (Synacor) Collaboration Suite (ZCS)

    CVE-2023-34192

    CVE from 2023, added in 2025

    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 25, 2025
    CISA deadline
    21 days
    CVSS severity
    9.0 (critical)

  2. Rank 12Zimbra (Synacor) Collaboration Suite (ZCS)

    CVE-2019-9621

    CVE from 2019, added in 2025

    Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jul 7, 2025
    CISA deadline
    21 days
    CVSS severity
    7.5 (high)

  3. Rank 13Zimbra (Synacor) Collaboration Suite (ZCS)

    CVE-2022-27924

    Ransomware

    Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 4, 2022
    CISA deadline
    21 days
    CVSS severity
    7.5 (high)

  4. Rank 14Zimbra (Synacor) Collaboration Suite (ZCS)

    CVE-2022-27925

    Ransomware

    Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 11, 2022
    CISA deadline
    21 days
    CVSS severity
    7.2 (high)

  5. Rank 15Zimbra (Synacor) Collaboration Suite (ZCS)

    CVE-2024-27443

    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 19, 2025
    CISA deadline
    21 days
    CVSS severity
    6.1 (medium)

  6. Rank 16Zimbra (Synacor) Collaboration Suite (ZCS)

    CVE-2023-37580

    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jul 27, 2023
    CISA deadline
    21 days
    CVSS severity
    6.1 (medium)

  7. Rank 17Zimbra (Synacor) Collaboration Suite (ZCS)

    CVE-2022-27926

    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 3, 2023
    CISA deadline
    21 days
    CVSS severity
    6.1 (medium)

  8. Rank 18Zimbra (Synacor) Collaboration Suite (ZCS)

    CVE-2018-6882

    RansomwareCVE from 2018, added in 2022

    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 19, 2022
    CISA deadline
    21 days
    CVSS severity
    6.1 (medium)

  9. Rank 19Zimbra (Synacor) Collaboration Suite (ZCS)

    CVE-2022-24682

    Ransomware

    Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 25, 2022
    CISA deadline
    14 days
    CVSS severity
    6.1 (medium)

Follow and verify

Get new Zimbra (Synacor) vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.