KEVWire

Security intelligence, with context.

CISA KEV by vendor

Synacor known exploited vulnerabilities

CISA's Known Exploited Vulnerabilities catalog lists 19 Synacor vulnerabilities: 5 added in the last 365 days, 6 rated critical (CVSS 9 or higher), and 6 with known ransomware use. The most recent was added Aug 21, 2026.

RSS feed for Synacor exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant

Added to KEVCVEVulnerabilityCVSSEPSSFederal due dateRansomware use
2026-08-21CVE-2026-73570Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability8.9 (v3.1)71.7%2026-08-24Unknown
2026-04-20CVE-2025-48700Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability6.1 (v3.1)1.7%2026-04-23Unknown
2026-03-18CVE-2025-66376Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability7.2 (v3.1)20.2%2026-04-01Unknown
2026-02-17CVE-2020-7796Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability9.8 (v3.1)93.6%2026-03-10Unknown
2026-01-22CVE-2025-68645Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability8.8 (v3.1)48.9%2026-02-12Unknown
2025-10-07CVE-2025-27915Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability5.4 (v3.1)4.1%2025-10-28Unknown
2025-07-07CVE-2019-9621Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability7.5 (v3.1)81.0%2025-07-28Unknown
2025-05-19CVE-2024-27443Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability6.1 (v3.1)24.6%2025-06-09Unknown
2025-02-25CVE-2023-34192Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability9 (v3.1)77.3%2025-03-18Unknown
2024-10-03CVE-2024-45519Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability10 (v3.1)>99.9%2024-10-24Unknown
2023-07-27CVE-2023-37580Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability6.1 (v3.1)49.1%2023-08-17Unknown
2023-04-03CVE-2022-27926Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability6.1 (v3.1)17.6%2023-04-24Unknown
2022-10-20CVE-2022-41352Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability9.8 (v3.1)95.5%2022-11-10Known
2022-08-11CVE-2022-27925Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability7.2 (v3.1)98.7%2022-09-01Known
2022-08-11CVE-2022-37042Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability9.8 (v3.1)91.9%2022-09-01Known
2022-08-04CVE-2022-27924Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability7.5 (v3.1)93.9%2022-08-25Known
2022-04-19CVE-2018-6882Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability6.1 (v3.1)29.8%2022-05-10Known
2022-02-25CVE-2022-24682Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability6.1 (v3.1)30.9%2022-03-11Known
2022-01-10CVE-2019-9670Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference9.8 (v3.1)>99.9%2022-07-10Unknown