Synacor
19 vulnerabilities in Synacor products that CISA lists as exploited.
| CVE | Vendor | Product | Name | Added | Fix due | Ransomware |
|---|---|---|---|---|---|---|
| CVE-2026-73570 | Synacor | Zimbra Collaboration Suite (ZCS) | Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability | 21 Aug 2026 | 24 Aug 2026 | Unknown |
| CVE-2025-48700 | Synacor | Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability | 20 Apr 2026 | 23 Apr 2026 | Unknown |
| CVE-2025-66376 | Synacor | Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability | 18 Mar 2026 | 1 Apr 2026 | Unknown |
| CVE-2020-7796 | Synacor | Zimbra Collaboration Suite | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability | 17 Feb 2026 | 10 Mar 2026 | Unknown |
| CVE-2025-68645 | Synacor | Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability | 22 Jan 2026 | 12 Feb 2026 | Unknown |
| CVE-2025-27915 | Synacor | Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability | 7 Oct 2025 | 28 Oct 2025 | Unknown |
| CVE-2019-9621 | Synacor | Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability | 7 Jul 2025 | 28 Jul 2025 | Unknown |
| CVE-2024-27443 | Synacor | Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 19 May 2025 | 9 Jun 2025 | Unknown |
| CVE-2023-34192 | Synacor | Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 25 Feb 2025 | 18 Mar 2025 | Unknown |
| CVE-2024-45519 | Synacor | Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability | 3 Oct 2024 | 24 Oct 2024 | Unknown |
| CVE-2023-37580 | Synacor | Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 27 Jul 2023 | 17 Aug 2023 | Unknown |
| CVE-2022-27926 | Synacor | Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 3 Apr 2023 | 24 Apr 2023 | Unknown |
| CVE-2022-41352 | Synacor | Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability | 20 Oct 2022 | 10 Nov 2022 | Known |
| CVE-2022-27925 | Synacor | Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability | 11 Aug 2022 | 1 Sep 2022 | Known |
| CVE-2022-37042 | Synacor | Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability | 11 Aug 2022 | 1 Sep 2022 | Known |
| CVE-2022-27924 | Synacor | Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability | 4 Aug 2022 | 25 Aug 2022 | Known |
| CVE-2018-6882 | Synacor | Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 19 Apr 2022 | 10 May 2022 | Known |
| CVE-2022-24682 | Synacor | Zimbra Collaborate Suite (ZCS) | Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability | 25 Feb 2022 | 11 Mar 2022 | Known |
| CVE-2019-9670 | Synacor | Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference | 10 Jan 2022 | 10 Jul 2022 | Unknown |